{ "Event": { "published": true, "date": "2025-01-25", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-01-25", "timestamp": 1737849788, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "1294971e-4ef4-451d-8f3b-6a474d798db0", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737763205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763205, "uuid": "ba9c2bcb-e90e-4b04-a515-a63d623615d1", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763205, "uuid": "7a09e74d-0c23-4443-ab45-05bb86b7abd3", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763205, "uuid": "efc296fa-ff66-4587-a0b3-30678f8eae8f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763205, "uuid": "8fb0cdec-25ae-47ff-9b93-bb61f1732eff", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737763205, "uuid": "b7856d7a-8440-4f28-b3eb-f504bb7a76c8", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1737763324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763324, "uuid": "a4e72934-d7f9-417d-a22e-d7f845feb373", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763324, "uuid": "ffea23c4-0062-44eb-b1fe-55fc1d94a359", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763324, "uuid": "cda6eb6f-ce4f-40b7-a9fb-901556b9ade8", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763324, "uuid": "0426ad04-b039-449a-b529-50531e4cf636", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737763324, "uuid": "1a5cebe5-4f56-46ac-b67c-41fd469ebae3", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1737764105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764105, "uuid": "ae677efa-09e0-43de-aa23-914676f2b393", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764105, "uuid": "18770e8e-f70d-4cc6-9003-d8edc0b31842", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764105, "uuid": "0fde7925-6882-4555-9c84-9abb4f968c8f", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764105, "uuid": "9391caba-6248-4c43-b898-a739760b2365", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737764105, "uuid": "316a0033-a331-4f1d-a118-e956ac02d41e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737765005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765005, "uuid": "438174e2-de37-473c-bf25-e20a584d1d99", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765005, "uuid": "5c3d7ccd-e45e-4723-a55b-dd058a667970", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765005, "uuid": "1dcd59a3-72a1-41ca-8837-6d537110a3cf", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765005, "uuid": "9e5d02a4-07f2-4416-8364-1b66bf175231", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737765005, "uuid": "7d3f4422-221b-49e7-bfd8-a2d8d440bfa3", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f045689-dabf-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737769959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769959, "uuid": "20cdaff5-2aed-4c84-b977-49f714d31945", "comment": "Malware payload", "value": "cf91e994907782a38dc16fda44d96b43", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769959, "uuid": "ad706aea-3736-43a1-b47c-d759213d0dbc", "comment": "Malware payload", "value": "96397188932ac6368249555413b4deef4e7eb6132aade08855a488092efe3854", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769959, "uuid": "2b5af887-74c0-4f48-89d4-8c64828b78dc", "value": "T17934D0F33046208E35EB4517A3A1E8F65CA31DF59B9F2BE311FA15E8844CBD6E01A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769959, "uuid": "eabe3956-057f-470f-afb3-eccd19835ab1", "value": "6144:HOkynp+xIW29UpP/LMTsVqVwcjZBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBU:H+npmpP/4kqV3Et9Em+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737769959, "uuid": "1802f755-f1da-4487-9551-90af6435cafd", "value": 239685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769959, "uuid": "a1290d9d-3440-4cee-9ff0-9f7f9dbb7a71", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "859c3243-daa2-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737770408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770408, "uuid": "7a04505c-2018-47c7-8043-f7eea86ca979", "comment": "Malware payload", "value": "ef808ef0b50f73d5d79a742bbb98149f", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770408, "uuid": "808abd1b-8e0d-4a84-8fdd-51cb31ae5694", "comment": "Malware payload", "value": "e098c8819d0a5d9e178313b29937f58537ceb8b916e9b0684a02efc47c716947", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770408, "uuid": "c0cafd36-d9fe-4272-91f0-1b7b617a03b6", "value": "T135B72392A78A0235C5A2FFFD618C0723B10DF549271DB25F257C11E0499E58B1EBBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770408, "uuid": "78863302-c3e9-4a75-81ac-b4ef5b0b424e", "value": "786432:hADXXuC9mkLqH0C1SWvEWbW7ZhG0HQaocLeo0mGztYjcieQVfWumL:ODngkLqHDxsbVh5waNLgl+1eQVf8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737770408, "uuid": "0b968b20-75f8-46f6-9804-9e5e1a29954a", "value": 48600823, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770408, "uuid": "3558a088-c5fc-4d14-b8a5-3165c6678c64", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfc4a7c8-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737770712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770712, "uuid": "72faac63-7bb7-4677-b828-b38f9372831c", "comment": "Malware payload (Mirai)", "value": "1fa74937ed9125086d7fe8e88457a20b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770712, "uuid": "6d933175-8de9-4eab-b063-feb45d45f83b", "comment": "Malware payload (Mirai)", "value": "4b7a3e51c67fc348633918c70637aa43955fc4ad138aace0e441c956e31efa02", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770712, "uuid": "91e8fd64-7fd8-4988-93f5-f227c4969dc5", "value": "T176C34C46EB408A03C4D51775BADF424A3323E755E3DB33069918AFB43F86BAE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770712, "uuid": "6c9f9f17-84fa-4611-82b8-c25b1344b999", "value": "3072:mKhtrsji9jju9TypMZQkusZdqv+WLwM/9CFTz:mK8jmjj8TypMZQgZy+WkM/9qz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737770712, "uuid": "6f0d64da-47ee-45b5-af85-8f03876bc866", "value": 125738, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770712, "uuid": "a271beaf-88fc-4ba9-8814-4a2f54fc66fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1737771713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771713, "uuid": "87db9455-0ed7-4153-8e2f-b7c69b196821", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771713, "uuid": "4c1ab28c-ebdb-4e42-b75f-368c6a4bb904", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771713, "uuid": "78932113-b3f4-4dd9-875f-0bf586f6ea86", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771713, "uuid": "45447afc-4979-4765-9ce0-2e9c8f4a300d", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771713, "uuid": "a3835e3b-0fe9-4f34-9e20-e61e1dc7909d", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737771713, "uuid": "5b607d77-e2f6-4109-9002-2e76c30db4bd", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771713, "uuid": "f03b4302-5286-4041-af1e-7755af75a732", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a291499-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737771776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771776, "uuid": "ab2f76f3-1e7f-4147-9994-a323a76729d7", "comment": "Malware payload", "value": "c1796f969cd5a5628c9a5c6d62b955bb", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771776, "uuid": "1576fce3-f7e3-44e1-9f05-7134196facd2", "comment": "Malware payload", "value": "9bca3d07d929280d6dc741f6ddda9b97393c306584247628dea47aa0c987aec7", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771776, "uuid": "b49e53b5-b367-472d-9467-b65fd31b0a88", "value": "T121263302BFB731A0EEB30D97D6E771788C4D7B8422E27C32B342263417E99515699E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771776, "uuid": "d8ad716b-b8aa-4040-a7cc-978c8ceb3b85", "value": "98304:uP4ODk/MSyis0ii2PFubUHoNyUZ9rob43R36sOMGaO75zUaqDrz:QQ/7E0YF66oNzZB6DsOMGaC5zU53", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737771776, "uuid": "1dc6e1c5-e051-4aa7-9781-76d3b09f0bda", "value": 4493312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771776, "uuid": "3a38556d-ce0d-4ee0-970e-4b7ba734fcc9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9066e00e-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737772324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772324, "uuid": "167f3f6e-f43d-46a0-bfc6-0281db806e92", "comment": "Malware payload (Mirai)", "value": "37722a790c89a39316c56c67868fb2d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772324, "uuid": "b373ecf8-ecb8-4d31-b5cb-0179f7584b2d", "comment": "Malware payload (Mirai)", "value": "b793ddd6b428c5fdae16d9b30921ca48664551be9eb4e6750c6d731524bd2a99", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772324, "uuid": "017d9fc7-a816-43ca-b1a4-1735781a9d3e", "value": "T1C301AD9D70259BB60F0D8F1160A60CC4D009DAC52361AFADEB881DBA4CD570A395DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772324, "uuid": "d1d6cf64-3730-40f8-8bd1-30ae8988764e", "value": "6:SzKMxGKnlGKxNIl5HGKna0LKilGKSOe+OvGKeI9GKfM5GKVJ0SHGKFhFL5lGKGGS:G5NIl540LKRODO7fMoSXtSo4n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737772324, "uuid": "5c217a58-a818-4a15-8444-d31cc7049a4e", "value": 741, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772324, "uuid": "85985b37-3d18-4296-9aa4-934b106d5970", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb02559-dac5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737772935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772935, "uuid": "35992067-bb60-45e8-bef1-487ad2e64bcd", "comment": "Malware payload (Socks5Systemz)", "value": "89c26735aac13b8fad108171a32555c7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772935, "uuid": "0c706a2b-1ced-4c4e-bce0-3e3b3e14ba39", "comment": "Malware payload (Socks5Systemz)", "value": "a5569df152c0a7db56f16ce6adfdfa12f5cee0e78783f7667e363807039139a0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772935, "uuid": "d88cf3ca-eb5a-4de5-996b-4a0f69ad320a", "value": "T1FC06338F62D8443CD592D3F39B280835479EF5331C9F186CAAAA5F9E3B355909AC53", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772935, "uuid": "a0f3e015-fbbe-4a91-a299-dbec3ca694a5", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772935, "uuid": "d6ab1691-8ac1-47cf-b7e9-dbb9e11e04eb", "value": "98304:4Q+tzhg+LgpBhotKq60Gc9hsJi97gMbzZ:4tS+L2qcqhHzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737772935, "uuid": "6c1d9cdd-2286-4ba3-aa49-1c4e4712c455", "value": 3701975, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772935, "uuid": "727b1a15-59b7-4d79-ba4c-c91bedb186ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ba6b84e-dac7-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737773497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773497, "uuid": "aecd2474-5242-457b-a55a-0702355a9967", "comment": "Malware payload (Mirai)", "value": "b7fbeb3541e229d891a0dcddc395a448", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773497, "uuid": "ca1c48c6-f045-4d7f-b8f5-bfd03598616c", "comment": "Malware payload (Mirai)", "value": "b0c8a4175113061e0b7eb4f3340fe72b8ac0b14ed36f6b4ab7f4c31106c23748", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773497, "uuid": "cf32dcfc-bbcc-4e7f-b245-65d3595dff41", "value": "T17C93E815BF650FBBDC6FCD3746B9170535CC650B22A87B393934D828B64B24B1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773497, "uuid": "0ea884d7-45aa-48c0-85b2-9848687fc0dc", "value": "1536:9K1bUfHFb+iMiienLHtSsv1MdOKopEmoASTO3ZdGYAbwXZlfX:9KBuHFb+JiieZKg1oA53GyZlf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737773497, "uuid": "4437832e-9c7c-4eb9-81e5-4c29b7e0aaff", "value": 88900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773497, "uuid": "7ef9dd97-affd-49fe-8a58-266d56aae667", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "615ef6dd-da91-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Empyrean)", "timestamp": 1737775503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775503, "uuid": "3f1bc4d3-2371-42d0-aeb6-e87be39f87e5", "comment": "Malware payload (Empyrean)", "value": "9ab4a1e098aec7c3ee5f99eea88e2158", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775503, "uuid": "2f591894-c7f7-438b-a13d-a88f0c19192f", "comment": "Malware payload (Empyrean)", "value": "1905af51f0ef9e3f652452750df58900b2c33aecf9d9e83c547a785656d42627", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775503, "uuid": "a4325a22-74f0-4551-89bf-0ab136a8f1e0", "value": "T10C1733F063980992E8E6557F5C0FCC260177FD0633A4E9DE82B19A388F63755697AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775503, "uuid": "cff1d540-9d66-45db-85a9-493a0adc3c58", "value": "1e92fd54d65284238a0e3b74b2715062", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775503, "uuid": "23a2c03a-2993-4609-aa0f-323046aef849", "value": "393216:bqPnLFXlryQMDOETgs77fGUgiR/gvEwCFyqMnTyqo:uPLFXNyQRE7hLRBzEv3o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737775503, "uuid": "6a723e72-ff0c-4675-b3a5-316bb501cdcd", "value": 19553162, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775503, "uuid": "e6c2d5e2-1dec-4a6c-b0c5-a54e27a1dd36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "788cd54e-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737775720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775720, "uuid": "5a1bd0b1-bb61-435b-89a9-037ff1b20132", "comment": "Malware payload (Xorbot)", "value": "bd3a8d8bdf601de07e1e7c8ec3090e4e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775720, "uuid": "7da21fc8-066a-4b99-bd45-a5e79d421d36", "comment": "Malware payload (Xorbot)", "value": "af525870a0099a8ea342896f2039a820f3a8baeb4a9b4f0cb47dfed96fd38fa7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775720, "uuid": "c5ec39f6-692c-4a18-85bf-ff981df4fbe8", "value": "T1652220D905C53E325888182D36F5F134E09366D2DFD73689898A3EB9B80CF0BBA56D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775720, "uuid": "a23b6338-5f91-4787-9c57-5349148587c7", "value": "192:U66wMIofHB2y27Tk2eKJ1ywFTrfWavzHHKCcvw2y27T8MIofHH2eKJ1y2zHHKCau:U66wMIofHB2y27TDBzHHKCcY2y27T8MO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737775720, "uuid": "b34bc47b-fea1-4f83-8dab-37829ae27b9a", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775720, "uuid": "63d4af36-2222-4971-81ec-3ecdba922713", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a6bde7-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737775851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775851, "uuid": "f3050970-667f-4bf4-9661-44a3dd8830d6", "comment": "Malware payload", "value": "0e07030ebc2e7394e3b6170ab05b5f1b", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775851, "uuid": "6c428cca-fa8d-43c0-8e8d-a0a13fe0504e", "comment": "Malware payload", "value": "69f374ff60d60fb1b4d109a89f04172f345802086381e183c31aa65f56a508ed", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775851, "uuid": "2a89657e-64b3-4640-8f1e-bc5194d13447", "value": "T1DB4533B37B6D5ACAF9C3D8FA1A9331084F173B970F45608A50B346219E9B328A1743", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775851, "uuid": "65401b14-8b90-4299-b97e-39688287945a", "value": "24576:zgq8nmI9MjuZHpbkWJjmQ1Iz2Z9RrN7qrTpxW20wbJKQnY2V3M:zgq8njXbk6jmQlZ7x7qrWzSff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737775851, "uuid": "19ff066a-0d1d-4bc4-a032-4ba5655fac7b", "value": 1273293, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775851, "uuid": "b987316b-eaee-4b29-a4a3-6b74a16ccd82", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41bd6163-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737776057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776057, "uuid": "d552998a-1b9e-45e2-abec-fcc138832974", "comment": "Malware payload", "value": "7a7899a73b5a7bfa1d1d3d7e4aece552", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776057, "uuid": "f4389653-7000-4bfb-9dfb-90ab605c3402", "comment": "Malware payload", "value": "0b51cdc274062fc08ca03b436460bfb8b389b74bad34afcbe83480cf5c2cf856", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737776057, "uuid": "4bd99084-64f2-4388-ab2e-b8549fa5b287", "value": "T19547DB8C0EB64EF8F265E01723616BA6E449241FEF453BDCF64D71AC9F04085FA9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737776057, "uuid": "ec13fa99-e869-4ed6-a30b-16b6bf286c1f", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrR:Nu/MEdS9plwV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737776057, "uuid": "7812231b-1064-40d3-85c3-09c830a97f02", "value": 25958412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737776057, "uuid": "5d1a8894-d1cd-420e-87e3-e5d5e6fe57eb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f141dcad-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737777055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777055, "uuid": "a5f551c7-0b6e-45a5-a57f-49402d9d636f", "comment": "Malware payload", "value": "7861ac088677bfc859c41e1f2a632907", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777055, "uuid": "f310cb64-16ab-4dcc-89c2-9fa19ce4af98", "comment": "Malware payload", "value": "635b1d9d9c13e21a3a81e3900ec50b91867a5aac173490326a39fcb44f926e79", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777055, "uuid": "1c38d8e7-dbdf-44bb-8a41-add3a4504870", "value": "79E202A113612798D716DBB93D7E301AC43C611732A90E402AD3A59FEA0FB145876EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777055, "uuid": "3631cf26-1bb8-4f87-8aa7-6d9eaae989b7", "value": "768:/kAKuobq1rduMGAXSEYEYv6DjbChaAUKvNvyk:87vbq1lGAXSEYQjbChaAU2yk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737777055, "uuid": "c4a83e99-ec97-4156-918c-1f4ec67d66e7", "value": 33888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebfae52e-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737777202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777202, "uuid": "e6621825-da01-4d6d-b1d5-17676deb7711", "comment": "Malware payload (CredentialFlusher)", "value": "1aff06f9950cd9c7104cf440a4891f38", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777202, "uuid": "04593859-f27b-44e7-b7f5-06f06a54abba", "comment": "Malware payload (CredentialFlusher)", "value": "f535061c424dacf5a623500aaf82b193fce2ed8a620e8f5cf4d9bdfdc99c6663", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777202, "uuid": "009dc72c-e001-4776-b508-5b6c8502632b", "value": "T1E1259E0273D1C062FFAB92334B5AF6515BBC69260123E62F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777202, "uuid": "5320727c-aa59-4b79-881c-a5544e495863", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777202, "uuid": "62f84ae6-4ad4-423a-b627-7063418c4679", "value": "24576:VqDEvCTbMWu7rQYlBQcBiT6rprG8aPL9:VTvC/MTQYxsWR7aP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737777202, "uuid": "9b638a34-41e8-49ca-a476-8d126189b757", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777202, "uuid": "d2450df9-bc5a-4fda-af30-d346bcb7e21a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afd5ca41-15c8-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1737777361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777361, "uuid": "1878c2c8-6c76-45aa-a21e-d5a4eea992c1", "comment": "Malware payload", "value": "396bd36e5ce0e257676af71ec7a0515a", "object_relation": "md5", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777361, "uuid": "7a904624-8fb9-4518-87ec-6da4feb9b481", "comment": "Malware payload", "value": "7f49cf3268283e07e239b1164e793f28c6e50e99c3ace8a637be56e292c9233a", "object_relation": "sha256", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777361, "uuid": "52e86200-c504-4d39-9402-afeeebe139d0", "value": "T1AE42B0063E9C3B0BE8A187F1FB396E76B2019D4E672F980FD594256154F316AF500C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777361, "uuid": "e42d2d52-4d89-47f4-916a-836b9f44f0f2", "value": "192:YTmCc4HnYXvQ2mDuYedvuXH2oLxZ6qSAM9vrqj7/sBJ6HGpTJDqiwOrvw9Bpjdya:YTYXvQDuYY2xZ6VTgDK4mpwTl5ya", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737777361, "uuid": "9858291a-670f-44ef-9551-f31f66095883", "value": 12708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777361, "uuid": "655675c0-8b84-4dd8-b8b7-36b54709d58d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8dac98c-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737777653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777653, "uuid": "0e433fe3-4afc-428a-8b48-f20facb7f2f8", "comment": "Malware payload", "value": "5b58c289b8b5de943b9b4d57eba0efab", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777653, "uuid": "b62b549e-e92a-4cb1-9048-b3971d5c9c5b", "comment": "Malware payload", "value": "ef72675cadbb0b69bb5864c4055f8fdee64b5f0181882c3175acc8c8e1179ce5", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777653, "uuid": "1a2d1cf5-b77d-461e-ac54-826023cf4d4c", "value": "T19A53F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777653, "uuid": "382bcbdb-ee43-4d63-880c-2c91fb813a25", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dg7R1X1t1RB1p+dy2sAU:aA1fho1P6n2e7R1X1t1RB1p+dP1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737777653, "uuid": "ef4ea161-9589-4bab-8226-42c41bb76b7c", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777653, "uuid": "fec5c533-a099-40d2-9d18-0263ddee08c4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737777845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777845, "uuid": "1ec805b5-7899-4bad-8af2-325ca589e0f5", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777845, "uuid": "c28b54f4-f908-4494-b8e0-40145e275d93", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777845, "uuid": "adb4b0bc-ff64-4e17-bf18-ad5bc3290d68", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777845, "uuid": "64618ca2-e187-4c85-997c-780ebe37f04f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737777845, "uuid": "f97b1d4e-511e-46b8-8c70-a67d65f3904e", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b9ffe24-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737778597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778597, "uuid": "84d95439-4c8e-4707-943b-f7600392b16d", "comment": "Malware payload (Mirai)", "value": "9f7e8fdeaf8fd2c71324d8c748f0f3b0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778597, "uuid": "abf370ea-b55b-421b-895e-46ae7c3e8a63", "comment": "Malware payload (Mirai)", "value": "6bb873af2fb0f7373a78ddbf4f8cb8bb55d4905e2d5948b6d6691a1cd9d86b6d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778597, "uuid": "7525853f-a54a-4d96-82b3-a6f2042e7084", "value": "T1E193D91A6E218FADF769833547B78E31939933C637E1C685E19CD6011E6034E642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778597, "uuid": "805f6e4e-bf08-475b-b6ff-6687ca2bbd0d", "value": "1536:180ykZJj2tvmB2/TSAAR+BF2OH2OjSOeqn5zXJVm2zeoKmUnCa:by6ItvmB2/T+M5zXDm2nDUnCa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737778597, "uuid": "2c0ec6ca-e54b-4209-9487-cde0ba785c14", "value": 88900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778597, "uuid": "ff6a749f-4794-4bd9-8bd1-32603f14a5a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a937609-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737778730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778730, "uuid": "fd81dd07-5cb5-42c6-aab1-50f088582dbc", "comment": "Malware payload", "value": "45427416fe0a0b836e6f597e469dd034", "object_relation": "md5", "Tag": [ { "name": "malware.heuristics", "colour": "#db4217", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778730, "uuid": "620e0273-0f66-4d75-a755-c115145cba59", "comment": "Malware payload", "value": "2c9e04d99cf4d7e4678584e499d2d7a5142e2b9243b325194ee3d8e58bcb0663", "object_relation": "sha256", "Tag": [ { "name": "malware.heuristics", "colour": "#db4217", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778730, "uuid": "b8fcc187-04f8-4909-94bf-2be7c0b36a75", "value": "T1E08633FA99CA38F8C14AE7F1456B24AE72ED3B9584674C4837CD0900CF625199E37B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778730, "uuid": "64d2c1db-1712-4f4a-a935-d290053ae438", "value": "9c136bf92a5db1e55d13186ee9f9e1bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778730, "uuid": "21584ef6-fe1b-4a2e-a2cd-6e9dbdcbb690", "value": "196608:0turl+k/vX9Z/iK+vbGa7uU2git9YOh1ucXU:0MpDnX9ZqGwoeO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737778730, "uuid": "9231bf45-b2f9-45ca-bfa7-1e79e424cb84", "value": 7961088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778730, "uuid": "d4632d39-d442-455b-87e7-e709c31c4142", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f644c75-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "f0a691d7-d4eb-49ed-83fc-2f277f5b5125", "comment": "Malware payload", "value": "1b3d22b619f451e2fe5c1511a45d583b", "object_relation": "md5", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "getscreen", "colour": "#816746", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "6889ea6b-d72f-4a90-9dfe-77d9d974db13", "comment": "Malware payload", "value": "4d9f5862e1b3a9b005f71c3f05e2446a18b2b0797518417f1d7e0ebbf5cb4517", "object_relation": "sha256", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "getscreen", "colour": "#816746", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "cb496966-ef02-4b5f-bc63-0df766576464", "value": "T147F0DC5FC82B84088942497508AAB509FCAA00238040E421F6CCE9E84FC1BA173038", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "65ac6010-aa0c-4462-ae76-1d0c625bd2b1", "value": "12:UhZFGfhIMPITjhQNNY/Y4M9Ur4NbxlsxNIQL:SZFGfqMPEhQQ/5M9Ur4N7srj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784804, "uuid": "3d4ac399-388c-4841-86c3-3225363cfd07", "value": 498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "50e51daa-956b-418b-b51a-fedb41b7412f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f6def42-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737784804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "a046c45b-11a9-43ad-b78d-9665b63bb8da", "comment": "Malware payload (Mirai)", "value": "c54fb33cf5d11f09bdfa4d6f817d43cb", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "9955bff6-44a5-4527-8019-2b7c8177f7f0", "comment": "Malware payload (Mirai)", "value": "d3453a440fcaff74ca0b56bf96f796851c4434c00a148e690c427177d87a0831", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "502ae1fd-5366-425c-9743-155e6c74e683", "value": "T1CF04C916BB550FBBDCABCD3706E9070239DC944B22A43B363674D528F54B50B5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "99a7f93c-087e-4bea-a36a-6bfc491ff09b", "value": "3072:XCfU/UQ3GxspugARjgWW2RWLy8Ah7EFTO:XR/UQ3GxspugegWWnLtA+FT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784804, "uuid": "26801ad5-33f7-483e-bb9a-8dee24efc0e5", "value": 190208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784804, "uuid": "67889d22-8a9f-4927-aae1-8e074de7737c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c37f7f9f-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784865, "uuid": "27795793-bf10-4557-88e1-342689ed5b2c", "comment": "Malware payload", "value": "87002bf3658e8e94fe213ab629bbc3e9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784865, "uuid": "e0b44f6e-c7eb-40ad-80d5-a2591173f8a9", "comment": "Malware payload", "value": "782975c468c39be9b998448fe36c901a2431d8d2bb05aea005e59fbc932ffce5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784865, "uuid": "499e24fc-d4fc-4853-a44a-dee377d001d8", "value": "T1894136102BE90325F2B34E71557AAB20C57BBC06DEB19E1D004D46891723A14D8B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784865, "uuid": "4061a606-7b81-4ec7-b33a-2c220dd38591", "value": "24:8lj/BF//Z/Ua+/+G2WbUCijYPwt8C0Tdd79dsHE:81LZNG2aUvUhCKdJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784865, "uuid": "aafd493d-c5ad-4c3e-8440-253a0665888f", "value": 2410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784865, "uuid": "6d8632f1-0e99-4a31-9a71-120031354f06", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c41b3b2b-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "5174bf4f-d711-4854-aab9-c65d03dc25bd", "comment": "Malware payload", "value": "2d549385c720128297bc3b78c68722c0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "d0055b65-d7f0-4af5-a7ea-612e5c8fd927", "comment": "Malware payload", "value": "c8c475ff518943b3b807b10e29b6bd5c644ac1408f7f320082be6fe5a8b1d1ef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "debfea26-1876-4835-996a-0ad4189a4f26", "value": "T17C24B30967405CE4C489063815BA8F63661EACB11A1FCEEF7598149E2DB36EFA0773", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "bd8eb67f-80ee-4408-b9b1-bb74d5b970f4", "value": "613bc86b5fd342bf560d8f0eb48ca2e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "234bd968-c80c-430e-81c4-d0f5bcfc45d3", "value": "1536:4nJpGNlfUaKnJpGNlfUajnJpGNlfUa3nJpGNlfUa5nJpGNlfUa:7l82l8Zl8hl8Xl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784866, "uuid": "59329586-b5c6-42ce-812e-157952bcba6a", "value": 218963, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "30671181-941f-4563-b8cc-b0ecbcb44d0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4486a9e-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "e945a316-1f39-4b5c-8c37-5b0169dabfce", "comment": "Malware payload", "value": "4306fc8134a17b66deaed4f01d8317d9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "51085add-d5be-4c9c-b448-7a035e227180", "comment": "Malware payload", "value": "ea900b5f7cce48de0ee7bc07fa7fea1edfb10dfffa4ffed08d48100cca0f532e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "0d5442b2-87f9-450b-8531-97ee9b5f2752", "value": "T123A402213692C072D89980708939CAA4177B7D712678D8C777B83F7E3E712C257B63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "92cc1fa7-9c13-4334-b362-5a4d0d425ee5", "value": "deaea31cbe3d076ff92bae0b7309a467", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "4b2d7a89-ae95-48db-bac2-003fbf25039b", "value": "6144:GhbLf1V8/AaPlTG9sCMt/4NKTWqQqHTf213XqMeOETHvmAK9AnNEJWk+:GZxVcPlq9A/4PqHrenq+UHvmAK9AJk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784866, "uuid": "cfaebe0c-d4c5-4e46-b46f-044923a85185", "value": 452608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "3a942d7a-bc62-44ac-9c6a-fa4b1c4716f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4611521-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "8be86f8c-16f8-4f2a-8f29-611ec318e962", "comment": "Malware payload", "value": "67b7558e2e6a5bc282ffb1719cc524ed", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784866, "uuid": "ebb93413-9e3c-45d8-9b24-1e05bdb4ca95", "comment": "Malware payload", "value": "8d4f01ab275d51d02ab864fb5c449e23b799a60b6a12ceec9a7f7c7e46e383b5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "432d4dc8-d1bc-469d-882f-4f47513ddb96", "value": "T1D2C34C081AD50B10D272CE35A8BAB311C63A3C49EDB34F5E0181C5C92132511BC65F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "7e61bbb5-e45c-41ef-97cf-4b35d49c07c8", "value": "24:8u/BUlgKN4ee+/3O+kWNdkyQJsGZaHXZpvQ:8SuGepO+ldk8GZOZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784866, "uuid": "4aaccdfa-0bda-40d4-ba89-e11cdbe4f0cf", "value": 119460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784866, "uuid": "4e92da70-9cea-4016-a3dd-d7eebe303a21", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5125eed-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "664ff70c-aab7-48a6-bd1c-6884f974fe9d", "comment": "Malware payload", "value": "869302a25d0718a79836fc9bd76838dd", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "da757a40-a684-4595-83c3-c4485e333563", "comment": "Malware payload", "value": "393cd74d484e8019fe8dbb133aa69b515c6786fcf24e269fd58ec179791be747", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "53ff9053-280e-4f80-8a9b-698ff6aa30be", "value": "T13724A31F75721473C2810338F8F6C3E66766FB2617107EC7E984362EE9B26D091AA9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "e67203b5-bb32-4ea0-9631-12e98747dc0e", "value": "613bc86b5fd342bf560d8f0eb48ca2e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "87b41e48-c8e3-4202-89fe-1b159e5a69ef", "value": "1536:4nJpGNlfUaKnJpGNlfUajnJpGNlfUaDnJpGNlfUa5nJpGNlfUa:7l82l8Zl8dl8Xl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784868, "uuid": "8710d43c-9f6f-4df8-b7a3-82153f27ec7e", "value": 224351, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "1a6a698c-dfeb-4407-a68a-8716347bc54f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c51284ad-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "d593e6b1-7e13-4a52-a27d-b582756cc12f", "comment": "Malware payload", "value": "9b0982108f2729f341cc35cc4855758b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "e72d3972-5f4f-40e3-9c99-aa3e8f57d5c6", "comment": "Malware payload", "value": "1767fcd8cfca2aa37d07c882fc1ca3e6c540ea4963e6f3b8b5c91748d4233fa9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "342c9607-3519-489b-92b8-1e7333441185", "value": "T145A4D603B6D80161EBA1F53DD92E9E11646AF6399FA7C3CB9E24622C1530EC198F37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "23961479-4032-4a48-b2eb-d5614fe7461a", "value": "83a65d189077196bb348af9dabb41a59", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "796839e7-c931-402a-bd90-39dd6dcaa7c9", "value": "12288:Hj186Nj186Oj186J6aRFqLphcxVoncidHQBdd7KIrfqOmzBFe9z8qx4eQWFhi4/Y:Hj1JNj1JOj1JIj1JHj1JZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784868, "uuid": "cf5a9d61-8223-4446-ab65-2e861d500dd3", "value": 466474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784868, "uuid": "397bfa2c-442c-49eb-842a-94e6dffac19b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5cd330e-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "1ebf2d22-eab7-4244-8e5e-ed1b2d47cbd2", "comment": "Malware payload", "value": "4dbdb937da06f9282288838cdda5ec16", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "17c100ef-f19b-4705-97aa-05dc1a090648", "comment": "Malware payload", "value": "4636f11e88022f342c0f6b179da80f76849c0478174fac798327d9b983a66e66", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "75b2db38-3146-4ec0-a3b9-d24b192c3a85", "value": "T1C607331D63A625B2D0BA93B7C283D92C0E0C1DA8DB31156C933AF15DBC7A584739B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "d7467c57-1a63-4dc5-a258-8904b2936c57", "value": "393216:vkJxda1xXXaLOg1M9uO86eVCR1Zoumr0OVEVjCNUr0Rj:iWvnaKV9dfeVsouvVjNr0R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784869, "uuid": "1e906995-2cff-4ed1-9f37-e3edd6f32a6a", "value": 17334272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "38a60a6e-a0f2-4b2a-8250-d7b722677957", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d7fcb8-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "c0fc4da0-870d-440f-99f5-5eab0009989e", "comment": "Malware payload", "value": "5f6a2214388c9c2442e86b99af884a01", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "66f02c5c-ad29-49c4-9c14-58bffc80d516", "comment": "Malware payload", "value": "f94845c3da8d17e2f9301a4dc54d464e303c93c2f86fde658d215cbf874a76c3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "834122e4-727e-440e-85c3-68d8f3aef7cd", "value": "T1FF95520E5769B21ED5204274B8CD432B3375EC8C4A8B974B5589B0306C762E9EED86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "11e9939d-f35f-451c-918d-75ff290c25b1", "value": "12288:QujK2KbKfKfKyvCKkvgvBvRKBKMKPKvKhK+KRvDvkvQvNvlKYK6KYKUvBvzKF:QZ7eCCgMY9Sy4jWJPJNF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784869, "uuid": "43fad4ff-17d2-4bf0-976f-2717823c46c6", "value": 2050357, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "daee9472-570a-4ca4-964e-bbe473a1391c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d80898-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "50196dd0-2d68-4169-b1c7-cc241ccf2dfa", "comment": "Malware payload", "value": "cb62c2243c649c6968da558143a992f0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "0905990a-6846-4930-8dca-e1c80302d0c8", "comment": "Malware payload", "value": "3d2f2e82b5aff09032fec0a2e579fcca7e668e87332295abbf9296df9ad271e3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "df25f19c-1b86-45d5-a6ce-f109b50101a4", "value": "T1AF75740E5769A21ED5204274F8CD432B3375EC8C4A8B974B55C9B0306C762F9AED86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "47c88eed-5bd0-4bfa-996b-7d9536ee015c", "value": "12288:EbNf5vYKhvKKav1vpKpv+vmK/KEviu4KHKxKqKtKHvVKPKuKhKtKG:Eh7ZxeiIpqofUUSz4UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784869, "uuid": "0748a01c-9574-4455-9214-c75d6972c07a", "value": 1665112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "91dc1b94-6abb-4e6f-8bd8-b9859f26d33d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5da1352-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1737784869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "ea46131f-a062-4b65-83d4-793b5d8cf297", "comment": "Malware payload (ConnectWise)", "value": "0de84329f55c53a3849789b399ee4ef5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "23e16d38-81a2-4801-95f4-01073211bc96", "comment": "Malware payload (ConnectWise)", "value": "71ae00a7e95588f614e64c695aadc9c26cc22a12199528a6c76a6eb15e32ff8c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "b4207c03-d389-41b0-99a0-bed2fe9b91a4", "value": "T10E46E111B3DA95B9D4BF063CD87A82699A74BC044712C7EF53D4BD2D2D32BC05A323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "7a7b5c5f-459f-4220-8cfe-5975662c7d68", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "14b7a33e-47eb-4d35-b526-cec3a51a2324", "value": "49152:GEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:DEs6efPNwJ4t1h0cG5FGJRPxow8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784869, "uuid": "bf8e4793-e7ca-4dd7-a98b-eb8d93cf7522", "value": 5622672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784869, "uuid": "ec78c9c8-8caa-4e95-a108-25751f4480b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c65b2710-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "47cc8e91-2a3d-4ec0-b1e7-42e17cedc3d6", "comment": "Malware payload", "value": "074ca842ea52396751bb6015979f2f79", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "40cab7ed-5f3a-4548-a596-9b3997253e0c", "comment": "Malware payload", "value": "644676713bdf4b81f8ec0a3a96a8f861c500a41a24a1cc4e93a3ee0c171bcba8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "eb31cd45-e5e2-4446-bd2d-3b02c1afbd0e", "value": "T1D5F51232E5A14036F6F106B3FD2891303E3CE738271588AAD3D4ED1D69A84966BF72", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "4d1d0568-1f3d-4876-9ae2-a2541049082b", "value": "d7e2fd259780271687ffca462b9e69b7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "c9bc90d3-c5d7-4f5b-941a-ac31e036f678", "value": "98304:8fUbK7jkYWHLX4ntIAvQGRhXZlg4Rj9hrwq8jj6Y+NU:8fUW7gYAL46AvQGRtZqmBhsq8KYYU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784870, "uuid": "f53899f9-794c-4b84-a025-b043f1954e0c", "value": 3590166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "28269321-dd58-411e-8bbd-da247547e94d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d00404-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "6e1b5ecb-0bb5-46f0-9fb5-7bf25b860e1e", "comment": "Malware payload", "value": "e0da14812276c781974685e05f0a49ac", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "7aa3a129-3db4-42cd-83e9-cfad4fa784ff", "comment": "Malware payload", "value": "6378a383bb5d526d6fcde9f4b6c397d61f655453baf0a2d5fdd39de607c9d751", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "8f015d52-6dd2-4ce2-9f01-49456c1ea32b", "value": "T15B06B1146AE90B21F3B3CD716876B711C57F7C8ADD634F1D008186891423610E879F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "75c133dd-c198-4f8b-8372-1b6bf9b990a7", "value": "24:8AyH/BUlgKN4eH+/38kWNdk6ZoEfQUYWmqdd79dsrabyLv:89uGeA8ldkc0WVdJ9Aayv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784870, "uuid": "03eb8523-9e4d-44c6-8f64-0f42b8f0b3a5", "value": 3852046, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784870, "uuid": "742c60ab-b558-4033-a014-06c5214cdf6f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7524343-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784871, "uuid": "aff1cadf-949d-45cf-a8a5-2abfda83f523", "comment": "Malware payload", "value": "ca48aacfb968d9128b55b9f211e1aa69", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784871, "uuid": "ea579925-9b9b-4125-a035-15ea91be6a55", "comment": "Malware payload", "value": "f7a7e86b011a1a38572d300d3f9f321ad783b0a98da7c4d5ffd6c34259ba100c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784871, "uuid": "20791185-f4dc-41ce-b733-542e811b6335", "value": "T1BE85630E5729B21ED5204274B8CD432B3375EC8C4A8B974B5589B0316CB62E9EED46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784871, "uuid": "37e64906-dd62-4188-8ca3-580202219a92", "value": "12288:ZgnrMKlKIKLKivYmMvQv1vNntvFKIK3voKUvhK/OIKjKwvzv7KMKev:Or9sZuMteZh1GZGz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784871, "uuid": "5a69ab9f-1951-4245-b9b7-ffb84b24c570", "value": 1814421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784871, "uuid": "56ff4373-fa4a-4147-b874-764a3ab991fc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d106d20e-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737784888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784888, "uuid": "37aa9a6f-cfaa-4cb6-a9f7-89d3ca543d6d", "comment": "Malware payload", "value": "5e899fa87608bf2c5caa54681a9bd397", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784888, "uuid": "37ea8171-52db-4468-b28f-e5995bfbfb36", "comment": "Malware payload", "value": "924f51cd62a7da29a1be4b6f5ba84a57c04a0c3095d99d696e97f75636b416b1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784888, "uuid": "9ef6f2e3-320f-4996-84d0-d743e61b21cb", "value": "T1EBC34C081AD50B10D2B2CE35A87AB312D63E3C49EDB34F5E0181D5D92132611BC65F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784888, "uuid": "d0a3a5cb-7b62-4e10-88ec-2bf944bccca0", "value": "24:8u/BUlgKN4ee+/3O+kWNdkyQJsxaHXZpvQ:8SuGepO+ldk8xOZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784888, "uuid": "e710ecec-5a21-4dc4-9e2c-0c5f2bbe3cf5", "value": 119460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784888, "uuid": "a66dbe9e-d8e2-4bdc-895d-0642bb8c489d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b37c547-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1737784985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784985, "uuid": "e03f6489-607b-444b-9d0b-7bae9c1c9bb8", "comment": "Malware payload (Mirai)", "value": "9a111588a7db15b796421bd13a949cd4", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784985, "uuid": "5e67bd9f-8266-445b-81e8-82e71a8f215d", "comment": "Malware payload (Mirai)", "value": "e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784985, "uuid": "7cc4a066-7fc2-41fe-9dce-da84247bbc4e", "value": "B2930272135417C5894772B4209409F5363AA265FCBF34FBBF93C66027834BCD49BAA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784985, "uuid": "4b29c156-7bf9-4da3-8db1-de6afa362529", "value": "1536:pymLLU1F5kHIrIj0D6rhfd+lK3exiTCzxNtI4sZLi6UEbFEBFaW1EH6t6wfPP/Q:2F+ooxalK3exiTOijZLdUEbFlWPP/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737784985, "uuid": "8686b777-21ad-4c7a-8d1d-4fdc81259432", "value": 95268, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86a822fb-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737786481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786481, "uuid": "c0b633e0-bbca-451f-b020-370995cc4bfc", "comment": "Malware payload", "value": "476db896f9d4295f1dc85f67cd623746", "object_relation": "md5", "Tag": [ { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786481, "uuid": "073e7078-705b-4db6-884c-7b921ba9cf14", "comment": "Malware payload", "value": "5114da088a69bb422ad486fab662cf8b47786c0808247e125d4cee408612941e", "object_relation": "sha256", "Tag": [ { "name": "banker", "colour": "#bc8d20", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "Loader", "colour": "#c23f3f", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786481, "uuid": "b3557323-7e68-49de-a5f7-13e42f3cc440", "value": "T10987C41078BE98ABFE420671D082F11AA5237E1964164DCD398FBBFE4F79E4D125D0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786481, "uuid": "0d9a245e-c1fc-4aef-bee5-f82ecff8184e", "value": "35614f361339aceb95ec62a70fdbb486", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786481, "uuid": "e9fbae7a-c4d8-4e07-b4e6-27af160ad5cd", "value": "393216:XxvX6J5UNk/APAEpSeRvHOwjTsgSoP2tT3:5X6J5USYxprvHOw12d3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737786481, "uuid": "fa525dc3-3c5e-49ae-b500-b0153c3ce42d", "value": 38218240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786481, "uuid": "e40d74df-7629-451f-bf86-b572fa3058b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df759d18-dae6-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737787059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787059, "uuid": "2dd42f6f-6035-451f-b84f-cff067b8c3ff", "comment": "Malware payload (Socks5Systemz)", "value": "44c7d95768f1af57b2dd4a9fcd8bcd59", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787059, "uuid": "0199c9e5-3b32-4b81-a7fa-0129dafce0f7", "comment": "Malware payload (Socks5Systemz)", "value": "33cfb36c39de81128398e155faa2ef609aa1271773896ddaf075795e1c3ff85c", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787059, "uuid": "9f20269e-4e40-4413-96bc-15952d678376", "value": "T15EF5334F8C96E172E5B35E36FF0174805F31AE284770188FE4F95ECA556628EE8047", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787059, "uuid": "aa895ec8-3031-49f9-afe4-bb949ef2d108", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787059, "uuid": "4027d584-c025-4f82-bdc3-0cca11b333d2", "value": "98304:4+xwKykcJYYn/GBRUCXHLibYPiTZf8yaEEkFs:NpBGYewnriM8fTs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737787059, "uuid": "dc7f749c-5520-4afd-b947-52f69cb1bb39", "value": 3633301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787059, "uuid": "fb55526f-df74-4d74-922b-f16940fbf47f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "605b668c-daea-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737788564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788564, "uuid": "1c0f6f97-cff8-453b-a5a2-ee66d380abc3", "comment": "Malware payload", "value": "2cb194529ab2cc94f752314aa4db215a", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788564, "uuid": "cf9457fe-5ee2-4afc-b102-913997ec59f0", "comment": "Malware payload", "value": "285d7d9c028f5474ac683f3ade4cf4732226f55fdce7638dbcbf06ac92631cf5", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788564, "uuid": "a37ca5d1-17c3-467b-bfc2-9c771ffe812a", "value": "T16841026253F90336F2B60731EC7259777637B852B781EC6E4121916D1473650832AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788564, "uuid": "1055ee91-657c-4fed-a088-86fb25b57d86", "value": "24:8sT1N86WdzY6/wHcmpnKoE58HSvCj+7Si7Ih2JQvMHdm44Ih2JSa:8S1xWdzf0ckbAv7pq2JsS2M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737788564, "uuid": "822e4136-162c-41d7-836b-f5c1342be19b", "value": 1983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788564, "uuid": "a366667a-c12e-4d88-acae-ab0e526fa612", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c94749-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737788983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788983, "uuid": "b6f0358e-5b8a-40ca-b9f3-00f32e1c14c5", "comment": "Malware payload", "value": "83072bc86abcdfce92508e1bb4aa594a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788983, "uuid": "30584362-0c88-4242-8cf7-9e197dfa5de0", "comment": "Malware payload", "value": "43b5ee9b140623990c45d9d9e0ae006d114b181b54db732c28f945f29e590d87", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788983, "uuid": "cab79a29-62a7-4ad9-b500-a48e9c1423ba", "value": "T15334DF333F6E40942665274068498B5DC36C0943F24A707FEBD42FAA4F61B8759A3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788983, "uuid": "b66cdcc0-ac71-4ea5-b748-604edd8bbb52", "value": "3072:yC4XqPh52pR/zv+at/7HInmzd9W1SVxYSS6AIjUMqUeJp+M6o1of/BMTYjYcG71w:y6Ph52XLv+GoQ/VxYSEIfleMM7oWTYUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737788983, "uuid": "82e234c1-aad5-49d7-a40e-64712efd5aaf", "value": 239698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788983, "uuid": "bc8b0374-c635-4b68-b7f2-4926d2ab4b47", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737789988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789988, "uuid": "e4e6e054-a823-4bf0-8f44-a5c69e1063bd", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789988, "uuid": "9c356baf-ee73-499d-aaa2-5a1519a952f9", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789988, "uuid": "56609918-257e-45a3-90ba-965c4f6a7ea8", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789988, "uuid": "3fa790b6-f629-459e-a23e-727bdf6b8f54", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737789988, "uuid": "2a91a7ba-62e5-4326-8092-2803426c92dc", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "862fb9b6-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737791205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791205, "uuid": "fb97087d-d8b1-432a-9e42-b37601bd118d", "comment": "Malware payload", "value": "b8d4d8f37dc14009e4eb4ff080487cbc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791205, "uuid": "1476e184-6f26-4f8f-97d8-24d6f625a083", "comment": "Malware payload", "value": "beb8535f5b055c2caa251ee0bab8dfcbbda09c8df0435b74d9d0fecd6112f774", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791205, "uuid": "e058deef-ecf8-411c-ad87-f6509591fe41", "value": "T1FE34F1483B2349ADFE092B3D4467063AD895FF44D36295018F794726A3E4A0FFE8D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791205, "uuid": "b186bf6a-dba4-4b14-ac6f-83a7970027de", "value": "6144:4Sy8OVS8pcM58sESjB7VVaQ2P7LRYfPfeefnvsUx7/M3oRuVZl:4SyPVfHOsFBraQU7dYfPfeMLxyo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737791205, "uuid": "169a0961-ee77-4a6b-a611-01e8078ba421", "value": 247876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791205, "uuid": "ac30235f-8545-4963-b436-0e74459e005e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5426c73b-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737791586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791586, "uuid": "88392c1d-a6c1-42c8-b554-761fa2f8e3a8", "comment": "Malware payload", "value": "322621f9053226f7b5e6c0f313c6a625", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791586, "uuid": "bb97a3f8-97bd-4f91-9cf9-ebdc0c0c0a25", "comment": "Malware payload", "value": "fc8ec537d2a41afcc6e453ee655feb05a107748218117548621d6eaff36c2e7d", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791586, "uuid": "06a03e6c-183c-4048-beb2-f22f3facc878", "value": "83641287EF36BC1FCF001AB225DB4F9D986D775B42C7E0A5B9C0814F17A21857AD2294", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791586, "uuid": "112a7978-2e53-4df3-9319-d1f06d02fe20", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737791586, "uuid": "6b47456c-1454-4b16-8bc5-94c9890824a2", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184f6ada-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737793420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793420, "uuid": "251d4c63-c83f-4868-82a9-67498bca0e11", "comment": "Malware payload", "value": "123dfe79846e600a8336cd14fe647d5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793420, "uuid": "66b2a58f-b16d-4873-a22e-8a2a82db2df3", "comment": "Malware payload", "value": "e967cff2e9a75e8f80fb4938ede971f9accee357cf9a761e9b34cdf5e9285e81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793420, "uuid": "60c30bba-e32d-4f67-a225-9b0260e9274c", "value": "9A73121613AD296152714AF1E7FE7F88E50D2A688FF1AC247C227C68ED333AE1CD4519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793420, "uuid": "e3458e7a-2ef2-46b5-9b42-794ff4a9268a", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J5:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793420, "uuid": "b8ebbb8b-3539-49c6-9239-c9fd5a10cded", "value": 75296, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5eec071-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737793459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793459, "uuid": "efa6551d-7bbd-41e8-8f6c-3bc2fe4debc2", "comment": "Malware payload (Stealc)", "value": "c3838ad5d741e219b411daa61b358724", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793459, "uuid": "ce56a45c-522d-448b-a623-26b552ba83a3", "comment": "Malware payload (Stealc)", "value": "43c68e6c74edc805027b287065ac0e4c8ba83328b01db4ef8bfe32178826e722", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793459, "uuid": "7016d217-bc90-4598-9109-3923fe34b6b2", "value": "T1FE853389DD42B196CAEFA3F1D5DB023C7DD1807C2A088D2EAD498434AD466578F1F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793459, "uuid": "2194b9b1-4889-4c01-9cc6-74f82bb480a0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793459, "uuid": "b6b7f617-3224-4205-b4e7-ac26a757da63", "value": "24576:M84EyUcYl5KMz0Fg2qbMYA9w4gXJ/gGWg7FrdygK9aJB7A0jPRqs5udSE31uRKv7:M8qGLucPPcsinaoCqEudSy1ckLh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793459, "uuid": "68c4f3d2-a580-4cb8-a9a8-1d280b3a2065", "value": 1769472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793459, "uuid": "f864ace8-24c9-459d-a815-d9056c619f3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcc9e2ea-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737793497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793497, "uuid": "c7735d90-7759-4048-bee8-d8886999b4f8", "comment": "Malware payload (Healer)", "value": "5dbadcc89db6c82040b7ce86886cafbf", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793497, "uuid": "65fb5467-2bd6-41b6-8a60-d013b2994e16", "comment": "Malware payload (Healer)", "value": "3c2eaeeae90e6a4a72fd11c57fac10420f2ea4c9432e8c18da90003d5362c114", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793497, "uuid": "0273cf75-9cf3-4d08-9b9a-9c21eadcfa5e", "value": "T12DD54AE2B80D72CFE09A17789527CD42596D87FA5F2A08D3EC2D64B97D63CC212B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793497, "uuid": "62adb2f9-b106-46e3-b1f1-68637231fd10", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793497, "uuid": "25560868-f6ff-4a08-a8de-4184d0db892a", "value": "24576:d29AZw/3EJWN2qYdS+g/K3F6Ix0pqZrmv0Qle8IAKyyTS4l8LyB9lGKRHomoUa1P:PZwvEz1Mo0pSNKrAlJof1H2k6h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793497, "uuid": "58d980da-eaf0-4d7b-b3d2-34eb6c6b095c", "value": 2801152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793497, "uuid": "5335650b-7ed4-4bd6-9007-33178e8784a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f8530b1-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737793636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793636, "uuid": "6e2e6ef4-efe0-4566-9227-7a052c60777a", "comment": "Malware payload (CredentialFlusher)", "value": "007ce394e3a14fbdf1c81ae17afa9203", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793636, "uuid": "8725179b-4e5c-4a05-a784-30865709258e", "comment": "Malware payload (CredentialFlusher)", "value": "ec62f231d7ef54c48bd8d8deaa9e0d4808a46661408a94d603b15c72ba55d811", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793636, "uuid": "adfbd631-2283-4e63-90a3-788f762828b8", "value": "T17825AE0273C1C062FF9B92734B5AF6515BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793636, "uuid": "e279e99c-b8e0-4036-8602-ebcc6b020669", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793636, "uuid": "36889f6b-14de-45a8-84cc-d305ab8c355f", "value": "24576:4qDEvCTbMWu7rQYlBQcBiT6rprG8aMd9V:4TvC/MTQYxsWR7aMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793636, "uuid": "d91736f1-0714-4235-99bc-1759f7de2f7b", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793636, "uuid": "72742fdb-2718-48b0-b0e6-92d70450edb6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5242aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737793642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793642, "uuid": "d96352f0-0ee9-4598-bf98-f6349b93f615", "comment": "Malware payload", "value": "70e3f6b8302027cfd1a757e02252400a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793642, "uuid": "51085ae7-fd15-4613-b702-062b56ce6f44", "comment": "Malware payload", "value": "edd1e9268ff4961c7d0d2364d7215925d38852fa8646636d8edb3e97900e53ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793642, "uuid": "d0918abf-30ea-4cb1-98ac-ce504f150906", "value": "4C731229139924A5D63141F1E3FE1B88BE591FA9CEE1EC14BC117C98ED333AD2CD6518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793642, "uuid": "a5e2d1e4-38ec-483f-85c5-b82fbbc199c8", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1d:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793642, "uuid": "d6954abd-3485-4e2b-b03d-2fb611f47ca7", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737793776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793776, "uuid": "6086397f-dd0b-49c5-b77e-e4099e228fe0", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793776, "uuid": "790f8dab-c5b9-4ae1-84bb-0b9fefc2c20f", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793776, "uuid": "19c48225-3dc8-4b0c-a595-077c282462ae", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793776, "uuid": "b74cb47b-9c80-485c-8ece-f6ca51e22c73", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737793776, "uuid": "6521af23-4068-4793-a78e-6c5e085c5e65", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9f9f361-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737794072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794072, "uuid": "de1e9cc3-9efb-4ead-a231-c418961cd6ac", "comment": "Malware payload (Amadey)", "value": "3a786c5a9d67062c310cea66c07f9e27", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794072, "uuid": "c60ecfea-cd32-4556-bede-051e231c28b1", "comment": "Malware payload (Amadey)", "value": "9442089e068815efb6cb96ec5a24007d92c24ab5e1eec601c364a262aee23496", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794072, "uuid": "32dc6f1c-96e9-4634-9cd6-7de3531d3e42", "value": "T1F99533D583BC32B9CB660A398E1F3B92297157309EF86927088B41F8FD7B64450F2D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794072, "uuid": "df43947b-4b5b-4c8d-8abe-43f106d2f552", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794072, "uuid": "a4ee9782-7449-4234-b58b-10b864cc4427", "value": "49152:/hMB8iOndbZKJnjQDwXQ+66hyp3v8cfUDbV2eMhhHFqlkv:/hu8dtZSQDwXusg1Fkk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794072, "uuid": "657207d9-ad5b-4abe-9c74-6a50435529bd", "value": 1933312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794072, "uuid": "614c6707-2950-4cad-bab7-4604b143d37e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d14562e7-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737794337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794337, "uuid": "8b4c1ad7-91f0-448e-8649-588476eb7b35", "comment": "Malware payload (Mirai)", "value": "d4012679ce9c86c980b3be6c2cc146db", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794337, "uuid": "53d9ffac-2e27-4fa4-96a1-82e3844c62a6", "comment": "Malware payload (Mirai)", "value": "ab9da2430e0959de52380ecb02eff0ca82c150194558972ce4f4ff8c5607bceb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794337, "uuid": "e658cfab-d19f-42df-ace5-05fa5cfe364a", "value": "T12E734B22BA761D1BC4C0A87A61F70764F2F2575A25ECCA0A7D620E8EFF2164032577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794337, "uuid": "0e2410f7-a70c-4763-bc1b-acbe4ef18980", "value": "768:xKoBq9yX1nH/38Eidnp5+FZeU/p51bpCiO+YHb5/+bxUIi01tdMHI2:xKwSyX1nH/3Zi5fGZemp5lLY75Gtvty5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794337, "uuid": "47911ab2-1ac1-48d0-887f-22f13565c551", "value": 75152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794337, "uuid": "83f3d805-e4c9-4247-8533-4edfcd0cef39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df7b55d0-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737794361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794361, "uuid": "3c48a651-cbd7-4990-b7fd-8024b826ac11", "comment": "Malware payload (Socks5Systemz)", "value": "826eeb2cef0e64a5569b807c12bf5f27", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794361, "uuid": "f28fc0e1-985a-4b86-b7d4-5f5f173e46eb", "comment": "Malware payload (Socks5Systemz)", "value": "d88cff35563e52c1f289e5efba70d842f94a686c119c469da666fc3e219703c9", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794361, "uuid": "ee9263a8-44e0-436f-b7a0-657dc59e2751", "value": "T1CD539E13EBE18475E072DAB01E2BD1149A37BE662C38241832DC9E9D5F376D0D91B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794361, "uuid": "af83e370-7329-46a2-a6b1-b2ea79fd1e00", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794361, "uuid": "46b11020-5dfc-4c04-90d1-c375db597206", "value": "1536:/3qRLK2Q0SJWkBcCpYQNtfpa/Lcd6xwIRd:mLPTB0ViQXfccduwu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794361, "uuid": "e02fb2aa-1c9f-4c46-b535-fcb4062aa982", "value": 63164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794361, "uuid": "135ba2b2-b51b-4aee-b579-8df65dc9d32a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09457b49-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737794431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794431, "uuid": "46084976-e6be-4113-9ca1-89e82432c395", "comment": "Malware payload (Socks5Systemz)", "value": "5d26aea0e8045c4951235be04f8a3fd8", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794431, "uuid": "ff2166ca-b6f5-4f41-9a35-40599c1871c7", "comment": "Malware payload (Socks5Systemz)", "value": "36d08fb993c212af57f191733ce2278288854f67e02155a641631e69420bb5bb", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794431, "uuid": "de7bac32-dc7b-424e-b9fb-88143ef5ae80", "value": "T16DF5331A5B9B20F4E27AC7B88C76A611D653FC3908375854F3D86D4D4F2682046B2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794431, "uuid": "89403035-52bb-46a5-b56d-64e1c185913f", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794431, "uuid": "580ce773-7c97-4a14-a40a-85588ccbaa8c", "value": "98304:4CGJ0Xc5MQ8+sORE6Rg7A96h4ALYrGUXlF1hNLCUAPMIXFs:lcCSsIAw6KUYtRhNLRAPMWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794431, "uuid": "48682f2a-1274-4bb1-9e98-e931beba9cc2", "value": 3644460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794431, "uuid": "d18c9cec-fe25-4e79-907e-485da82ebcec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1984ea1f-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1737794458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794458, "uuid": "ea8b5f17-80d8-4a8d-b91b-ab4ebf0fb388", "comment": "Malware payload (RedLineStealer)", "value": "99d5f5036b40b7ac310111b293178844", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794458, "uuid": "a1c0c407-160d-4cc6-ad70-65f17a5018ca", "comment": "Malware payload (RedLineStealer)", "value": "85661829ef874dd16aa1fbd9d79187bdd30c16e180ab9fd7586f8a7bbf0c748a", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794458, "uuid": "0763288d-1c39-490b-8e9b-1466a50234ec", "value": "T117146D48B7DAEA13D7BF0675D069008827B0E313A31BEB0B5FC695F2BE96315B7144", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794458, "uuid": "c8227ec0-e9b2-43dc-958d-5014fcca908e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794458, "uuid": "95a9ce9f-32c7-4fe2-9f55-33ec5eb1f710", "value": "3072:sYqdc0NkzDA6h1BJ43W9M3HPYPTIiY7OQARe1x95ncdGWDLAtS:sYqdc0NkzDVATfmTIlA41EB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794458, "uuid": "3870bb51-2813-4b1b-998a-476389564027", "value": 193845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794458, "uuid": "40e6ef5b-e87d-4513-affd-c08801ffeb8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fac5d3df-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737794836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794836, "uuid": "63554868-20dc-4ab6-8e80-bc98fc5f81f0", "comment": "Malware payload (Mirai)", "value": "563ca227e2ff0c74ca86d7d36fc0a9a0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794836, "uuid": "d4fb3010-1976-454b-815d-d3b5e989b5c8", "comment": "Malware payload (Mirai)", "value": "8d8669c515426a7640048ac849e0edda86bdbded6db470cef1e4753af340300c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794836, "uuid": "09a58ee4-9359-49a8-b933-3fb53a434082", "value": "T129632A51BC81AA13C6D512BBFB6E028C372723B8D2DB7203DD256F25378696B0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794836, "uuid": "51e4994c-b588-47a6-a612-424c0aab7541", "value": "1536:5jWOymssTrnCdpZ+f3SQPv3nHftOVT3kgIQEsvjr:5jWOymOMf31X3HSRfjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737794836, "uuid": "647e4f09-3996-4922-a99e-06bdf71d2f15", "value": 71040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794836, "uuid": "8da45e5a-8b90-4cbb-b7df-3a70f0062137", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c37b373-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737795026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795026, "uuid": "92c901ea-eb20-4c42-9a90-f9f839688eeb", "comment": "Malware payload (Mirai)", "value": "555beee8e9c6b24f04ef5a2d33f1b394", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795026, "uuid": "bedb797d-ec2c-4f2b-8bac-084a508424dd", "comment": "Malware payload (Mirai)", "value": "e36f7a7e7a4ce7f9dfefec04cb83ff2e1ea2aff5c5687841e140eaf0ba38d11a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795026, "uuid": "3a818e51-d81d-46ad-86c7-ac0582a75b4f", "value": "T10D434AC5A647D8F5EC1609755076F7378BB2F43D0128DA93C7A9E633AD53A40EA0B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795026, "uuid": "51e43a6f-384b-462c-9376-0ae9b4c63162", "value": "1536:AvVGCa7UZg9nx3QueLIAjUt0Ji1TgY8JT9df9Sq:AvVdsUZg9xVeLnjUtgiWY8tfff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795026, "uuid": "f7dfee19-e343-420f-8d02-4b11cccec9aa", "value": 58548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795026, "uuid": "3d7e7976-1f94-42be-bca0-0f81c3414de9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29d6c2b6-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737795201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795201, "uuid": "64e36a47-4ea1-4528-ab79-fd9243e09e91", "comment": "Malware payload", "value": "5affe46eeabeb46ba2230406e3bd0a1e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795201, "uuid": "fad34c65-a5e8-4488-b306-7b088304957b", "comment": "Malware payload", "value": "a20d6af49d7ce6dd1baf8d4cc6ef6711597c198d3f45032144c6d70561ff29f7", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795201, "uuid": "dbd7bfd8-8b1e-4deb-8cb1-12da6fe45e0f", "value": "0072C0A123C13558E331CF793BE8340ED05C4913716957146D95A20AD96FB245CBAFFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795201, "uuid": "309b63d1-1b4e-4f9f-be28-1c25a149849e", "value": "192:KXs4Lyi82so2yzXtb1MQFGKVeKJRT6XXmBrdIQG2tdaOqGM5V6LsDdvrY6jdE7Fk:yb2eX3zAKuiNPZRwwqdvrrduMf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795201, "uuid": "7313e619-9746-45f8-ad31-910e999e7c54", "value": 16944, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "566e3479-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737795419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795419, "uuid": "b6faae1a-9305-4bae-a968-b84ace279575", "comment": "Malware payload", "value": "39a5a0ca133b52cfcaaad2af70b0e10c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795419, "uuid": "b6e5e004-ed2b-47e7-8b6e-ad278dfc4e7e", "comment": "Malware payload", "value": "2aeeb82cbe8f3ea9a71167e480990f849a5a85487a2afd44646ee0af2cb61916", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795419, "uuid": "d725fb8e-f46d-4569-9fc3-1cee481ff84a", "value": "T11B47DB8C0EB64EF8F265E01723616BA6E449241FEF453BDCF64D71AC9F04085FA9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795419, "uuid": "d1479bcc-cb89-456e-a4a1-554e62ea7a92", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrT:Nu/MEdS9plwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795419, "uuid": "efa670bc-d857-4fa0-bfa0-54a1e28d9e21", "value": 25974702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795419, "uuid": "d0b1d3c0-4f44-4ebb-ba14-9a156337a13b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70c4f94d-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737795464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795464, "uuid": "e5a58888-87d5-432b-a7ab-f473220d6a59", "comment": "Malware payload (Mirai)", "value": "9c324160379272c83e40347628fab2a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795464, "uuid": "b4e334f0-bd23-4d17-9928-0f8a1739731a", "comment": "Malware payload (Mirai)", "value": "ac294e53c4a990d5775a09ea0e5c86e42e41665d73a84b82f0b1343c350eaf59", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795464, "uuid": "2fd680aa-e63c-4a9e-811b-89e3ed001b16", "value": "T177634B02731C0A57C5A75DF02A3F27E0D3BEAA9131E4B784251F9B5A92B1E321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795464, "uuid": "53796562-a196-4b26-96e4-380bb12ce7d2", "value": "1536:nmhz9fHaDnbHdfsnFywkQV73I/tcx8Xg2rbj:Kocwe73I/tLX5rbj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795464, "uuid": "0f6639fc-ee1f-4f6e-9801-5ca6905a0d30", "value": 67044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795464, "uuid": "a9b45f37-96ab-487c-bc25-f47fd2e898f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86af75be-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737795500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795500, "uuid": "7f0ce260-eb42-4b91-896e-4347cb3db185", "comment": "Malware payload (Mirai)", "value": "4b3d7aadb435c09490c728171369ae34", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795500, "uuid": "5b774020-bc8c-49f9-a820-4738614b4c21", "comment": "Malware payload (Mirai)", "value": "098718bcf5c79c51934e2f8b2f67de884515764d9028bca54e0253edf6ac7d98", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795500, "uuid": "7e487642-ab8f-4bcf-8154-4c31fc270084", "value": "T175633B91BC819A13CAD4227BFB6E028D372363B8D2DE7207DD255F21778692B0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795500, "uuid": "fef486c6-71e4-45ef-bec6-c0da862ea293", "value": "1536:j5b7wv+pE/xChiHjJjv7f6OjyxLIB1/vyor:j5b7Ixyq1jzKEB13r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795500, "uuid": "993cc77e-fe05-4cf7-b1a5-bc436b6f6097", "value": 67912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795500, "uuid": "df18e2ed-b244-4447-9748-09789bb21a2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737795500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795500, "uuid": "7bfd73c9-d97d-4619-a04b-6994df7649b3", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795500, "uuid": "7844eddb-609a-499a-beee-bb32729f6bea", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795500, "uuid": "1c24be72-3c7d-492f-964f-4d55e8aed613", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795500, "uuid": "0bb2ae9e-5eac-4c3d-8bc4-21b5ded34ec6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795500, "uuid": "6297e2ad-1e87-4c9c-abe5-2dadc0affb28", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaa06cc7-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1737795561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795561, "uuid": "9abae03f-9dce-4879-a945-b9170a8b1663", "comment": "Malware payload (AsyncRAT)", "value": "482ece68e9b421f4ee1fd93123ec3d54", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795561, "uuid": "19e216f6-6c3a-4d3a-a00a-025ab1156af4", "comment": "Malware payload (AsyncRAT)", "value": "a245dc0d34568bb31a62d55ff3d1c5431ac28bb1c831f2ad19507220d253776c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795561, "uuid": "da5cb8a8-39ff-40ea-b616-7b87d2afd5b2", "value": "T1B2F36B321102BDCE6F7F3E49A4042DA11CDC3877AB54C55CFBC60AAD65AA620DE39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795561, "uuid": "8544ad51-d6d3-48d4-9adb-05f4f7a45c17", "value": "3072:ZcUKZ20H5qt7ABLmYOlba6c5GdOa7MQrq3v0ayW3sfc4xDAmMz/zlZVdtj0QPvBH:ZcB20H5qt7ABLmYOlba6c5GdOa7MQrqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795561, "uuid": "f69c71f9-b3dd-44d6-9f74-9c69715e5484", "value": 169880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795561, "uuid": "352e616c-fb48-4dd8-ab82-df0fca6fbf60", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d488323-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737795753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795753, "uuid": "dafc2b80-8723-421d-b487-2b680505e29e", "comment": "Malware payload (Mirai)", "value": "307877377d7a8359d8cbc9b83dad21e4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795753, "uuid": "d6e2cd4f-8370-48e9-a9ca-6954a11f21b5", "comment": "Malware payload (Mirai)", "value": "2a41c157bf39716408be5c627f36a113a4ec6978f553569496aebc5db398dace", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795753, "uuid": "647603c0-0302-46b4-abc2-1b6fd162efd9", "value": "T14CE34C56AA808B13C4D61775BBEF42453323AB64D3DB73059928AFF43F8679E0E236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795753, "uuid": "6c2cadf2-aa4b-413f-854e-f17c22188478", "value": "3072:D7x8j+/LQziFknaiFkx9QjFgpSgcTG1H/M6UgnM/9VMfxavD:D7xK+/LQziynaiFkx9QjGZl/M6UgM/99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737795753, "uuid": "c0212662-d65c-4fcb-979d-a018daee9fd0", "value": 153228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795753, "uuid": "37bf2a6a-b21f-4044-8088-aad060f3e6b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f80db7-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737796355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796355, "uuid": "10333c92-8a3d-4550-a300-7a2563855f63", "comment": "Malware payload", "value": "c57315a67ceeebb0327a91f84e3c6179", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796355, "uuid": "d777cfc5-f655-4288-9020-f3147081c915", "comment": "Malware payload", "value": "8b9ed610186b4b9365855e93b6b45e1b4654a625ded705ee5440a9d68eb2ac16", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796355, "uuid": "6645a9a4-9d39-403c-b747-60ec4da57cd1", "value": "T1AC453332E75D84D7EEC3E0B9D18331186E1E3AFF4B34209295BB61E09C56625D05F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796355, "uuid": "c8e716ed-62d2-4dc9-a2c9-571a35ddf70d", "value": "24576:eJRH+QCTgMdOjNOeV0xfbkeLj66dezCZ3x9BXrJsX5ig6+6odr:FT8pMbkEj66jZh3J3t+jd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737796355, "uuid": "cc2a43a3-a42c-41da-9079-c2034b6d3578", "value": 1275074, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796355, "uuid": "cc43719c-ed5f-47fd-b3ae-893216d4d784", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e067ba4c-94de-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1737796466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796466, "uuid": "02835303-7e30-49c0-a5e8-0e712ebf6a29", "comment": "Malware payload", "value": "1603996752011f91da1e841fe11bbf06", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796466, "uuid": "aa8c4b12-c279-44f8-bc82-a576bfd35250", "comment": "Malware payload", "value": "d4dd171c8143192cab63ee42dfe1bf359fbac8af325123dd404ae88ea1ee8fdb", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796466, "uuid": "a3ae5bb1-5066-4822-86fd-bedf76c76cc7", "value": "T1983302D01761278C4271E9743CED305D8524192F72EB3D502DABD18EF45A62268BBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796466, "uuid": "4aef0ce7-8300-4fa6-ac11-76428b540580", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQA3:8D+CAXFYQChaAUk5ljnQm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737796466, "uuid": "11c9a221-69e2-4590-8965-86e014473312", "value": 54112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796466, "uuid": "96827e2d-222c-4c7c-8b17-768b2c11f3e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a6dbf0a-dafd-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737796634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796634, "uuid": "bfbf6ea5-f548-4eab-aa8f-fc4214f2ca2c", "comment": "Malware payload (Stealc)", "value": "085b0c4dd7f9e3c0644f855271fb9974", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796634, "uuid": "aa2b983a-50cb-440a-a044-042ca6259844", "comment": "Malware payload (Stealc)", "value": "e4de24a7545db41966c7f5470007f6122344b14bb5a10330480f9478dff9001a", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796634, "uuid": "c74b75b5-c67d-4b7a-94e4-017c6701e43b", "value": "T16D85336119F3EBE5C64ACF7EA60E4A73EFB001E4CB225553E8439CD9E130A17D211A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796634, "uuid": "7f826742-24e3-4714-ac95-55e8fb4c831a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796634, "uuid": "093dbaa3-b3e7-49a9-a377-b757118dd269", "value": "49152:FwvTLRRkc2Ba6YpGFFKfMCyXv7SzFyvGE:FwvfRRd2lyfMCjRMGE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737796634, "uuid": "3e74331f-d65b-4e5e-b936-e7daf179a8b8", "value": 1831936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796634, "uuid": "fcb247c6-563b-451a-bdf5-dd26774290a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35d890dd-dafd-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737796653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796653, "uuid": "c0aa00c2-9abe-46b5-a034-36000e00f01d", "comment": "Malware payload (Amadey)", "value": "eb2d2f9c288d71ca5e8b6e8240c3a89f", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796653, "uuid": "23584d69-6a17-4a8c-9f2c-abb444f22c5b", "comment": "Malware payload (Amadey)", "value": "6efedf3573c20ef29c9d39ca117bdf3bafc4e84a67c5e4b592c79b11ee31a7f7", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796653, "uuid": "f478e51d-cdee-4a5e-9dce-d7a82c4ee7b8", "value": "T1AA953314235BE0ABC4355FB0F8724D2EF7EB7CE223751178C9541A9127AA4E92A06D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796653, "uuid": "77bbb5f8-eec7-4c2d-bb62-0b81c17cccd9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796653, "uuid": "918b2a07-f90c-4b79-bdfd-fcccce06f41f", "value": "49152:jRD25ymiIgtn9yhf8UE53QLjiBotpUgn:bvIgt0hY53UjiiUgn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737796653, "uuid": "852fc1a3-b1e7-48c6-9f0e-cde6d15a4127", "value": 1923584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796653, "uuid": "8ab8b1e2-6171-4c7d-ad6d-d83adc0f9178", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737796829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796829, "uuid": "2dd8369b-0f0e-4feb-9e51-9d8ac55c43e6", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796829, "uuid": "9e6822c5-72a7-427b-beec-52ed826b80ad", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796829, "uuid": "acc52fdf-ea38-478e-8d68-3a9036690237", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796829, "uuid": "0a1c86f7-3d8f-478a-b8a5-5376b5a6a4ca", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737796829, "uuid": "bc8d3c13-058f-4d9c-9914-1b5d0844649f", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "083c3c46-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737797006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797006, "uuid": "df70e508-5dd0-47cc-a663-5fd040839c28", "comment": "Malware payload (Mirai)", "value": "e14159272de6d686597f36d4b9dd1634", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797006, "uuid": "381f6393-32ff-426d-8d89-18fd31ffbb3a", "comment": "Malware payload (Mirai)", "value": "1d29338980e593399d649948d2ad593b5a2afa9e12a59a218d48dab5704993ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797006, "uuid": "4615b8f8-ba88-4243-b332-015737aa822a", "value": "T18943AF73D83AAEC8C05A96B0B4748F781F63E448C2A71FBB1A55C5669043EACF9053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797006, "uuid": "c1ad7972-deca-4875-94b8-0e826c847728", "value": "1536:YaEwtUOUDCfUgyml9/KN6NV7ThfXcC52Tvr:YLQUDCfUpoiNWJfXcBvr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737797006, "uuid": "875f37da-0212-4871-86c3-482afba95e32", "value": 59960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797006, "uuid": "59adbbe7-cf2d-4159-8181-332c007fbf62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76057dde-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737797190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797190, "uuid": "e89c383d-7bbb-4fe2-be97-d28ca145f406", "comment": "Malware payload (Xorbot)", "value": "b982b6ae16cb44414b1eb34c4cd56f46", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797190, "uuid": "6eaaf5a9-a633-48a5-96b5-f755693dc737", "comment": "Malware payload (Xorbot)", "value": "7376133428f9dfcce68b1ca38b88291fa1f1e2585082dc6c145dd188d3866283", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797190, "uuid": "6e839b90-9fdd-41af-a470-e464173ca194", "value": "T1AF2210CA12903E3A54498C0939A4E89465D3A0C8DBDF3A947DDA1D747188F8DFBCAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797190, "uuid": "bded9464-3843-4ba2-bc75-0f31a3362a6b", "value": "192:bJY6qqv0QNQwMh15ShnfTd/0fQwMh1xfTB0c6qqv0Qu:bJKaQwMh15Sh5/0fQwMh1r0uh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737797190, "uuid": "35c9c1cd-449a-4002-b565-83aa6fb5270e", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797190, "uuid": "e892401d-2537-4842-9a30-a42516043718", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76a74714-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737797191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797191, "uuid": "9e06c12b-4724-4e6a-ba4f-2a57b1a9aad7", "comment": "Malware payload", "value": "08b2f7bff7fe279140fe3a4a0acfa502", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797191, "uuid": "c9edbd81-d079-4be9-84b8-f7b304626bef", "comment": "Malware payload", "value": "08ff25d90703562ce4247cc6250698722661472d06fe8a03a1fe69f33002035a", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797191, "uuid": "a55673d8-3c8f-43c3-a5e5-20db88e235f9", "value": "T189B339721202BC8E5F7F2E4AA4002D911CDD7C77AB58C55CFACA06AD51DA620DE3DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797191, "uuid": "526a42ae-553d-4da7-bfc3-53689605201d", "value": "3072:ZcUKZ20H5qt7ABLmYOlba6c5GdOa7MQrq3v0ayW3sfc4xDAmMz/zlZVdtj0QeXhn:ZcB20H5qt7ABLmYOlba6c5GdOa7MQrq6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737797191, "uuid": "e4c388a0-f529-4cb8-951f-70d646505f79", "value": 113220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797191, "uuid": "54ac1bc6-d84a-4552-9932-6f695c7c4dd8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be02e9ed-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737797311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797311, "uuid": "898573b6-7e63-4a53-a979-34a8b4348b88", "comment": "Malware payload (Mirai)", "value": "998909cca8e5d30029c567bb0577b9c3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797311, "uuid": "6ca0ed09-d6fe-41a7-b2f8-44d1252183ef", "comment": "Malware payload (Mirai)", "value": "cb6bf5178e3cb058591b4e75b9ed00a32eac9abb711ec47101a58378f3510578", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797311, "uuid": "6dc5ceb7-7876-4914-99cc-c5112112e793", "value": "T15901218F2C1266854E04AFBCE66A0D6C574AE3DC2160AB18A4591E7B6CDA644B434E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797311, "uuid": "db3828cb-77c4-4476-b1b6-0b57bdc73fd3", "value": "12:KUE+juWUE+sLjuWUE+6NIl5VuWUE+H0LKguWUEFtjuWUE++7suWUEVLuWUE8uWU/:K/Q/n//xNI79/BKK/Ft//X2/Vn/G/q/P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737797311, "uuid": "5ca58fa7-3e3a-456d-aac5-f18ecf682985", "value": 677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797311, "uuid": "487700bc-dfe6-46c4-95e5-039a24b06229", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7df2149c-1964-11ed-9f24-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1737797681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797681, "uuid": "cb62900b-b34b-4d60-b790-6c4d6e88881d", "comment": "Malware payload", "value": "719093e99ca99b6f4986d183531785bb", "object_relation": "md5", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797681, "uuid": "e501cdfa-e836-4ae8-8507-99f1cdc9c073", "comment": "Malware payload", "value": "0267d1a79736e41e7aa40cbf186f8b0cf66bc978a35e9a0c16ad3a113ea7ba07", "object_relation": "sha256", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797681, "uuid": "6bbdb0a2-48c9-4ed6-97f6-8cb3a60fbd89", "value": "T18C3301D00762178C8265D9793CA9301E8524252B32EA29102DABD18FF54B723ACB6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797681, "uuid": "7cc9f284-8657-45d6-93e6-613429c3b769", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQm:8D+CAXFYQChaAUk5ljnQm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737797681, "uuid": "8dfe8a0b-61b8-4902-9f1f-e346b293c67a", "value": 51264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797681, "uuid": "de6593ff-d131-44cd-8c01-457215acb641", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3845a1f8-db03-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737799234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799234, "uuid": "e41f76db-365a-41cf-89a2-13b24d22b205", "comment": "Malware payload", "value": "ecfaef225138eaa425c72d5ec3079e82", "object_relation": "md5", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799234, "uuid": "924d26d5-d38b-4c29-b432-eaa9cf0529c6", "comment": "Malware payload", "value": "122de83d360a6380795a69cef51e0da49310a811c241403f00d52d7a9b4c8a54", "object_relation": "sha256", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799234, "uuid": "6e6ff2b5-60fc-420c-b881-1551516c92c3", "value": "T1A742C1C081B7052ED2ABC2F45F44D848725ADDFAB8C1959F92A9E87984E44FE1D2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799234, "uuid": "dbc651e8-3a39-40cb-a952-ecb1bfbc25d7", "value": "384:m3Lq+syj0w+rg7fh5+LT8BOM5OAJ/leMk:m3Lq+sg6rgzQ8BOMIAzVk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737799234, "uuid": "bb2d8348-7ba7-41b3-92b0-e1eed0c925e3", "value": 12708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799234, "uuid": "39fd921a-3eec-40b5-a4cc-2816ccd04d28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c3a4689-db04-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737799805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "49ccbc14-1fee-49fa-955b-bb6f0a036215", "comment": "Malware payload (Mirai)", "value": "db57a0b0f3c67eeb5ad45dca26bffb77", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "87b40daf-a58d-4471-8333-f497271f0297", "comment": "Malware payload (Mirai)", "value": "d49684e6c4e25cc93ed37a2e513e0330c482abaa2e160d9ae6d329867a3b81b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "3bf124b9-f355-4f69-8d84-fa5f1a52b668", "value": "T18D01AD9C78955BB71F098E15A0A788C8D0059DC52361AFADE1181DB84CD5206BA5C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "76c13632-e62d-4ae0-97e2-2d1df0250627", "value": "12:3J3oMiYNIl5wB0LKJPODOYs6uMeLSw+ti6UzcU:3J3j/NI7FKMDQJZUt4p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737799805, "uuid": "04ca82b5-7f75-42aa-a193-0823fef71820", "value": 754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "49fbe8b3-fbbd-4a8e-802f-f4a8d395983f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c3d6b1e-db04-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737799805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "56673ffb-3508-4d16-902f-a1ec46058458", "comment": "Malware payload (Mirai)", "value": "60dd149481001e8938dffe1e7ac8dc33", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "2f2c3a48-0fe5-450c-a807-d13f4abe2ebe", "comment": "Malware payload (Mirai)", "value": "c1b853ca1e5613ecd73f74bf6eaa982b3b9f5f2b393d623aed00cc41b2966b0a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "aa98271e-7ec9-43af-9bf5-1ec6d7ed80de", "value": "T13C011ECD38515BB10B498E5160A68CD8E0098EC52340AFEDE94C0DFA5DC5E19F75DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "ae1fb95a-6b40-4fca-af80-7fb7f4c07807", "value": "24:Gb0XbwNI7pbwKQbuDGbkvbWUbjMbWtXbnbMub1:pZK0qU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737799805, "uuid": "34ddb2ab-a7d4-4f45-817f-8c52bd8f4718", "value": 850, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799805, "uuid": "24caa274-396f-410f-8b11-2ebcf21e87f9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca4e6e90-db04-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737799909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799909, "uuid": "03de3aa1-bda0-400d-9b4b-1b0221998edd", "comment": "Malware payload (Mirai)", "value": "db56301ae873e66f9f13433aabfb83f9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799909, "uuid": "1e1005b8-b26f-4a82-ae7a-d97cdb505b16", "comment": "Malware payload (Mirai)", "value": "ba4b8cb7ef8a5ab78bd1502f0d0bedb94e425d0ba68b4f01a2a234eabe5059ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799909, "uuid": "1b8ed860-c3aa-4d15-b0b6-e2948e35bfd2", "value": "T11B633AD6F810DD7DF81FE77F4413090AB671B39106920F3A67ABB957AD321A40926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799909, "uuid": "a2272307-4f1e-4090-8d11-d1f24cc7838d", "value": "1536:XJrFaEBVVpCn0hxCKRJ+8hgy8s7Vdh4qxhYiA/vYdmt1dYbR:XFFaEyexRRJ6y8s7rx2iS7Gd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737799909, "uuid": "fdd54995-ce2e-44a7-84c1-576daf6e08ec", "value": 72944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799909, "uuid": "2d844c7e-0817-4888-a9f4-f931ebdae475", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350c7be4-db05-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737800088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800088, "uuid": "c67344fc-83c0-42af-af7b-8e7407548d18", "comment": "Malware payload (Amadey)", "value": "a7ecc8da87d167a82589f2b1d714d2cf", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800088, "uuid": "7a36f1a7-5fe4-4d48-b633-1cef6410a76d", "comment": "Malware payload (Amadey)", "value": "dc7bc18fbbcd3fd1050cb479417a27974995d73a4eed13ad06dedf7c9b262bfd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800088, "uuid": "e46cc5c9-7150-409b-a791-556662db5817", "value": "T14BB2745BF3A225E8E8B5EA36CCB3552EBCA5745443301BAF46B1451BAE792E0D03CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800088, "uuid": "e0ed7a9a-a73e-4307-8774-8c7d96c1b7c7", "value": "87c405cfd80a28aa6619590ebb20505a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800088, "uuid": "d949ce5d-3154-4f72-82ef-99462062294c", "value": "384:IpFGGIFJuGXyAFym1dYVVxGNFgJoVdhRjIfRPRS8u/KfDJcOsPDhxWBtIOcKQ645:W4JuGXyU4VsFgJoVouSJcOIfDng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737800088, "uuid": "44144933-293b-4ab5-b09d-a3a6ebccde26", "value": 24064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800088, "uuid": "b9ca3ac5-6952-4630-8377-9602e967dde7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b33b58b-db05-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737800125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800125, "uuid": "e5d5e4bd-f90a-4c75-8cef-5f785d1e67a9", "comment": "Malware payload", "value": "6cb2f3d57a23d75acd28014c5c801d6f", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800125, "uuid": "3bf6977a-7aae-484c-a643-87fc9a6ae9cb", "comment": "Malware payload", "value": "9bfd36a040186318e2786be37b0c5b230b814d5e9d1dfa8e16073922f151c16b", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800125, "uuid": "d63f5bcc-f25a-47b0-aa5f-30a3b4a2097c", "value": "T12F4533B7BB7C1BC5DDC353FC2753A1064E4E399B0FA5618E946254B288A9238F3249", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800125, "uuid": "f2d38177-a6f5-440c-8233-b2dcbe94414a", "value": "24576:4fE2wCRUjE/J6tOflbkEP/SW1yx6PN3+m5gdytHgcMMTFKeHS4o7:mE2vB6Mbkc/SWTPJr5gv9IJy4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737800125, "uuid": "0a3bba9b-7221-4818-bb21-5bb949cef79e", "value": 1263601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800125, "uuid": "047934da-1bee-401a-84a8-fbd67132b8ee", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737800895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800895, "uuid": "da75c0ec-7f75-49f5-92b6-80c7f24ceb70", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800895, "uuid": "7f7b5483-dda4-441d-9ea1-7f5a6a6b04ee", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800895, "uuid": "5c2a47a0-6ec4-40c0-ac98-2ecd04dfa111", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800895, "uuid": "52d9d816-a818-4b46-9dbb-9411fa350883", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737800895, "uuid": "f7ffd199-5896-42c4-af76-24448c79907d", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c647ed6-db07-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737801066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801066, "uuid": "ade3d52e-e3d1-4ab0-bc59-3f43dd629c70", "comment": "Malware payload", "value": "1d913e22beb807f1e917ed2bd679ff8a", "object_relation": "md5", "Tag": [ { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801066, "uuid": "ae9fc15e-43c4-4eaf-be65-cdc3b971774d", "comment": "Malware payload", "value": "1d7403af7c42cdebcb931394b28ccf0d804f41ce9db4d09f767558fda30d8093", "object_relation": "sha256", "Tag": [ { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801066, "uuid": "3983c678-894a-461d-b621-57a0a9fd4ff1", "value": "T1E7532A47D6CBF9F0CD450A78246BAB35D937A0323234DFF7E7D9B557AA8620260422", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801066, "uuid": "f3d8dc5c-e423-4531-a06a-aafab400598d", "value": "1536:7NKUBf1J2hoQYjSwScT87ARNpz7ZVS9Qm:7N11CYel7ARNpz7Zk9H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737801066, "uuid": "bb9fd61e-81b9-4ae8-bf96-1057c4b8ad75", "value": 64503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801066, "uuid": "d3c8f6b6-0c9d-4335-91fe-3543e7d98891", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1737801185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801185, "uuid": "00490a16-0aa8-4f05-a8bc-b6d15786d991", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801185, "uuid": "f2b6c8ef-77e0-4e0a-8e34-be1a3b509bef", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801185, "uuid": "1a4c4da6-85b1-41a5-b584-42ffdde50505", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801185, "uuid": "c9f7e4d8-4b9b-4a6f-9a6c-c84047c33246", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737801185, "uuid": "0b4c29b2-007e-4996-aa40-1302fc41fec1", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e58c360c-db08-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737801672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801672, "uuid": "a2d33707-d97b-4315-94b8-71e154d63328", "comment": "Malware payload", "value": "665db8bdb321540c6429f2db050c9285", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801672, "uuid": "ed46d23e-5276-4023-b22b-7a5a92b34b47", "comment": "Malware payload", "value": "99ebea5e9213eb8f9f055084685ad281231c4c307e99a4a2bce4a38f3c55cce9", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801672, "uuid": "14cbf848-e15a-4f69-88c4-099d4e942095", "value": "T1F1558E27F14280F2D214217169BA6736B9707B360E248F97E3C4DE796C726A1973E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801672, "uuid": "50a1852d-f792-41bb-87ba-3957d47666ce", "value": "250409c527f1649b3c9d070403de40d7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801672, "uuid": "fc1238bb-cb4b-473a-af27-504daa0846c8", "value": "24576:Hc2CXfYx2yMNL36odw4wCNNAZrrdzB3wsKcXG8PqQarA3+aeXLYNu1zABRAGjCeG:8MKNLdw4wPtzBAsKcXG8PqQarA3+aeXz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737801672, "uuid": "977cf576-17f5-4460-99cc-3191120df617", "value": 1339392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801672, "uuid": "6aeeac41-522b-4060-a207-8cc604dcd96c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cad5ed85-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737801723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801723, "uuid": "55479ceb-4b0d-43fc-a24d-a0def7d448bc", "comment": "Malware payload", "value": "a242aec835f7dab715577edbc2ea11e6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801723, "uuid": "dccf3cde-0f30-4f48-8aa5-3e742631aabd", "comment": "Malware payload", "value": "fd7b84631512b9fa92b2239896f703693525dfc55fa67e1f3445fce1965bfe0d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801723, "uuid": "760bc410-8d4e-4e01-866a-d716dbe4ffdc", "value": "673301D00762178C8265D9743CAA301E4524292F72EA3D542DABD08FF55B623ACB7EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801723, "uuid": "ebbbe95b-5097-42ce-96e2-69d9498543cc", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQb:8D+CAXFYQChaAUk5ljnQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737801723, "uuid": "c53ab8e6-69b7-400d-ad20-24a69f1a50d7", "value": 51948, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d368bce-db09-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737801873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801873, "uuid": "80073e32-25b3-4d95-88fc-269388e15d4b", "comment": "Malware payload (Mirai)", "value": "aa3d591af77b86cfb0d447e17e41f06d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801873, "uuid": "9667a048-c07a-4045-8ac5-b7cd76352a30", "comment": "Malware payload (Mirai)", "value": "b02c3de092ee738af2a79a03ce924a62f1b72d2abaad72224f186c44f287220d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801873, "uuid": "519f1b9f-cb58-463c-91a2-faca4c97ed58", "value": "T119732A55BC819B12C5D412BAFE2E118E3313277CE3DEB3129D205F25778A96B0D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801873, "uuid": "d81cdcef-a572-46ef-ba5a-715e183336a4", "value": "1536:bin6Kja0kIRz/cH1Mon3mBBtMaXQ2YckI8iJDsbTkYv/50YQG:Se07N0yo3EQaRDsbTkYv/mpG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737801873, "uuid": "5ab75ef0-1df6-4212-be6a-b9685f961e0d", "value": 79592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801873, "uuid": "04b0e4ee-970b-4424-81e8-e3be965d3007", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7f086a-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737804259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804259, "uuid": "d84cc9c6-e0f6-4a18-9615-bd8fd9b0b33c", "comment": "Malware payload (Blackmoon)", "value": "4cec4323e6fa9517a1e1b2081a205558", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804259, "uuid": "8a6d66f0-8532-4219-8c46-73c588da33ad", "comment": "Malware payload (Blackmoon)", "value": "e2c8c0e0960a76b051df36d2eba676a8096aa1e34e53c207173376a5d9422739", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804259, "uuid": "07167d85-06e8-4f68-bc55-1485a83d9f24", "value": "T1E04533DA3C8CD1C4D2DF28BAE70324F87834D66C8775B3157A90E53F182E8B9D95A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804259, "uuid": "ce36a8c8-4c77-4b8d-b68e-a5f71eab93c9", "value": "2e5f01e43a497b1cd096f44f6ff24f8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804259, "uuid": "925cde09-1892-4715-b1f4-9185a52035f9", "value": "24576:OMneyNyDVyH/9Z86HYJ6YVcsRbTqpxNR54K/VcNFrze1FLfIxaJ/agp6:5kQHVZ86HHsRGrhICzzJ/Xw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737804259, "uuid": "1980b806-91f2-44e8-9ac6-595d01bfa5c8", "value": 1214976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804259, "uuid": "3e062986-0e91-4dbd-80d3-4146ae378340", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c42b7c7-db11-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737805173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805173, "uuid": "a89dd612-d8cc-407c-a823-2f7724e8874b", "comment": "Malware payload (Blackmoon)", "value": "f661e455fd3d87ac478e854cc7b1c88e", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805173, "uuid": "51c4a111-994b-426b-83c3-ae6d9413820b", "comment": "Malware payload (Blackmoon)", "value": "877ba9a382f3756255a87151a80a6c8319653f2f70e14c85430086b9bb8915d2", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737805173, "uuid": "4934e602-a893-4449-a0c8-40109426bbe0", "value": "T1FBF4234EA90D58A0D9BF7AFD34999035293A9C1E77A152D822FD31B6C8DEC6C32FC4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737805173, "uuid": "4771bc08-b1b8-4a8e-9459-e1c976b28c8e", "value": "f7d3c7f56e9dfffa7efd2874f66176a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737805173, "uuid": "bfe095ae-c7f5-4135-b32c-ef30ea98c52a", "value": "12288:VaNdDI0pQuNo+Sz1P6HzazMsxEPpBkRY7QC0+UIfUmnF+cXjTXl5oq4aoS:V0FIud41P6Hzaz6P4BC/vT8f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737805173, "uuid": "bad101f4-a757-43f0-86db-f45d5e7d327f", "value": 741888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737805173, "uuid": "73b4aef0-2ccd-4f90-81bc-e78f79fd31a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00211e2c-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737806441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806441, "uuid": "dc905cf6-7288-4b23-a30e-93af2a447344", "comment": "Malware payload (Blackmoon)", "value": "d1b38387442bc8750f7bf876f6218000", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806441, "uuid": "412e8942-d03d-42c3-9635-1401af1f500e", "comment": "Malware payload (Blackmoon)", "value": "4c95f169b3e3ed641e33cfe1f9e2367ded85a03ac302fb565011287bc0785efc", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806441, "uuid": "5069c3fe-2ea8-4cf7-9624-227d99a37a38", "value": "T1013633C2DFB9A713CAEAFF779EE971094622E07CD3CD7EE09ECA94A5640580710016", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806441, "uuid": "db3ae388-7f87-441a-a8de-d7e3acb679d8", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806441, "uuid": "6692e348-38fd-45f5-a535-232544837b4e", "value": "98304:pdIQV8bO+22GMg0G7OB+zaESOsGu3gva5vj6FTemA/ZHM5QyRZTlpkQkReHl:8QyQ2gaB+/AGA9v+6m4avltkRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737806441, "uuid": "ce6ab75e-0b1b-491f-bd26-a483c146087e", "value": 4933632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806441, "uuid": "bba9882a-648a-489c-b0cf-c93755abdc0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737807125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807125, "uuid": "a32b74b2-590e-447c-a99d-0b1f499ccefd", "comment": "Malware payload", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807125, "uuid": "8057d2e6-c133-4ef7-a854-5781831959d7", "comment": "Malware payload", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807125, "uuid": "bddc3e21-bf89-4625-87a6-58fc4a7fd922", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807125, "uuid": "d2db2a98-a17b-4c7d-8b0a-374cf8493fe4", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737807125, "uuid": "d0bded3f-e9ea-45fb-b6a7-566e724c252e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d40b5ee-db15-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737807135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807135, "uuid": "c9a81a5b-1de6-41c1-aa47-b46cb5795dcd", "comment": "Malware payload (Blackmoon)", "value": "7b905c93af161b1b823784b4b3f7892a", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807135, "uuid": "bc8c964b-ad64-40c4-b5f5-a29c845d5f74", "comment": "Malware payload (Blackmoon)", "value": "6758761efa34be0911be2e91d0b71c1410e6392ce52ec7b9f0054c2111053ef9", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807135, "uuid": "7c5c1e3b-ac93-4f3b-a7bd-47812a3a615e", "value": "T1374533D1B0E70EE4C60E1DFBDE7132B26D31233596B3044AD060A6B76ACE7B96F648", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807135, "uuid": "b20dcd55-c1d8-4c8e-847f-33612c017b5f", "value": "27fa2d8ed9e08524570f756c264aa940", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807135, "uuid": "cd755ea5-a5b4-401f-bde6-e75423063695", "value": "24576:U/IweRUU6IRcNqfCvoiBDtNFhi2HEi05D6fRVdbciDHlr:U/gRcNqfg7fFHEi01q9xlr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737807135, "uuid": "aade06ef-6e76-4d43-b76e-157620862c50", "value": 1257984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807135, "uuid": "35819ef5-3090-40b2-a620-2696ee10dcda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b649eed-db17-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737807749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807749, "uuid": "41ef245a-52e7-4ad0-9e5e-8e748b0d8959", "comment": "Malware payload (Socks5Systemz)", "value": "1368a2324e0949f32753ff09c9954d44", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807749, "uuid": "ae62e8de-fbdb-49a5-a47d-fa4ce84b7e23", "comment": "Malware payload (Socks5Systemz)", "value": "e65511309b1d0ba012bd9239f5b16797a05d370b7c23090aaed1a26d47011bf0", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807749, "uuid": "d3eff2a8-91b7-44b4-8a1f-bfc5aa86f66b", "value": "T123F5333EF762C9F2D8D7D5312D3B82242A63FAF7592B05D9725C0E8DAB1741488293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807749, "uuid": "91d2e56b-dbcb-491d-b68b-020ea6c73162", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807749, "uuid": "0ffff3aa-2f90-4dc9-b96d-cfcbfb6e2d25", "value": "98304:4Jt/MDSzF5yg/dxozG3UDTCHlwi5+FSTCx7v:O/ISznyUaS3ATAlzISwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737807749, "uuid": "7c13492a-11b5-4fdb-b463-e37bb85c49e3", "value": 3647922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807749, "uuid": "4843a261-4718-4ab0-b0ac-35a1197b8a45", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "007bd0d9-db1b-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737809449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809449, "uuid": "6631f9a1-d3a7-4c36-889d-163945bd5742", "comment": "Malware payload", "value": "6ce8c9e90a2dade809ea96aefe928a2e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809449, "uuid": "c4b9b5d6-199d-41c5-a568-bc717dcc12f1", "comment": "Malware payload", "value": "24d3c880181061afd04886cdbd096ea071e431f7f1106a254ce16a1e2efd0513", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737809449, "uuid": "4e39e01c-e195-4064-826f-e962b1059796", "value": "T17731ED2256A4473AF3611B3BD8B64A75A13B7CA9BB42C92E80A141680533C10466EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737809449, "uuid": "fae0823d-6fc7-4493-a567-946de2212ee4", "value": "24:8c7LPEU13vzY6/wHcmCVnzE58yHO9Cj+7SkUlbQvMPq8oUl5g:87ifzf0clzeO97fo2Bi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737809449, "uuid": "f96f92d7-88ab-492f-bfed-5fad33ca404a", "value": 1807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737809449, "uuid": "c2426a62-df8c-473d-ad1f-f4f316c7fb46", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737810306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810306, "uuid": "7d32fcbf-ee9d-41ed-82ef-e15c0569c675", "comment": "Malware payload", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810306, "uuid": "892d4550-cd38-460e-9d66-0028c2e48716", "comment": "Malware payload", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810306, "uuid": "3104dd3b-8c6d-4c4d-bc60-b08e99366740", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810306, "uuid": "a85bbf44-b32d-4d91-9c81-8910f4d4c0fd", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737810306, "uuid": "04cdf3cd-9e65-4047-97c5-b2931ce827d0", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a3aee9-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737810559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810559, "uuid": "fdaa4803-85db-4b17-8a03-b5856819dec0", "comment": "Malware payload", "value": "5e15a65a39b61ba75670d49daeae9160", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810559, "uuid": "2652433d-6747-4bf5-8c37-c1010032383c", "comment": "Malware payload", "value": "ab7acd812af32139df8135d9171d1c3794d0906ddd40d26c3e19243c6b9e7f8b", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810559, "uuid": "edddee44-7448-48a2-a259-e1b4d92fd5cd", "value": "T1B12633AE2C0E670EDB33DF295ECD4855A1A2334BA7561AFECBAFA52F506495F001E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810559, "uuid": "5469a8da-23fd-4dd6-89d3-76e057354f54", "value": "98304:jR1thH/dYaGddaIuWCHrHKnzPTjvvabtMPPNTH/WBEmcxYF35:lhfS7rubEXj6xQNTuL6+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737810559, "uuid": "0ce2ef0d-49c3-4148-9420-4b6566701ea2", "value": 4445696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810559, "uuid": "7a7e770b-2f61-4b70-be14-45fbf3e5f592", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2afeb656-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737810808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810808, "uuid": "1ec0a7b9-6755-490c-a03b-3dfb68ae611d", "comment": "Malware payload (Blackmoon)", "value": "11274eb97c8085711cbcd0649c97ad18", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810808, "uuid": "8fbf3b5c-f352-4008-9b0a-7623bb6528ba", "comment": "Malware payload (Blackmoon)", "value": "faee0a2c405d4688f7c4492be0e41504583326d3dc72ca1c0c0632bb7746106a", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810808, "uuid": "24a52020-8aef-4916-beba-c5d145d0af26", "value": "T19B141225C2C88AD3E2DE24714BA477C5B6443269CE62874325FC53F7394B425BEBB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810808, "uuid": "3e041119-7d48-427e-a5c2-1d77530d59b7", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810808, "uuid": "18c78a58-e392-4f32-9be0-1e2610e78e01", "value": "3072:sRJvmrDKInaD2nc2JHUxWlj+UuwG1gImUF2bWhAns3pEUR6Nouti:s7vmrDKOaK7lj+UuwsgAdhn3pl6NoS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737810808, "uuid": "11597bbf-2aec-4394-bdec-b5cd5f5010a6", "value": 206848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810808, "uuid": "e145f002-5193-48ae-9347-c607f8833ab2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2e31391-da52-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "64c6fc18-3f12-464e-84e7-e46f932c1e8b", "comment": "Malware payload (Mirai)", "value": "d7fcff07b52bf721b7b4f92ced8924f1", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "120e5eb9-1d98-4233-a712-125d46597460", "comment": "Malware payload (Mirai)", "value": "3609f8f3d45d41da70c11fc558eb7e37b6cae17d88c0179a4473d9991dad23cc", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "93ce1c14-5dcf-4db2-b2e2-bbccf1c633d5", "value": "T13693C91E6E618FBDF268833447B78E31A75933D626E1D681E16CD6001F6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "6f96e6a0-33c3-448a-ac5f-148d485d8aef", "value": "1536:alrunnSfhjrSFg6AechOPKWzKWUzdWla1htNxL5ztagexAJPdAGk:a16SfJZdhTTLLaudAd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "6e5a3eaa-58a3-4a57-a9be-fddf01a0a0e1", "value": 97280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "070b0978-a598-498d-9dc6-e34164922e5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf642967-da52-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "1abf2deb-e096-41ab-8f6e-def576804a39", "comment": "Malware payload (Gafgyt)", "value": "2468f44c64738db89187e37e724271aa", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "79cff931-d82f-4a4e-ad43-24dbc73dc7dc", "comment": "Malware payload (Gafgyt)", "value": "647723492da9410480ea3337ea11c5e39d360305dea6a09eb661cce35b9a8b7e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "b90d4771-f62c-481e-bb18-b1532c2a3a82", "value": "T16793D71ABB610EFBD86FCD3706A9070235DC551722B93B3A3574D828F64B14B4AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "9a535561-3908-4ec1-ae94-cc1353ed0543", "value": "1536:1ZJEXUd9aiQXSHTmv+fbFKP8A9p8oGxr/csM+PZeWo+SZUpHDIi5iPf8g:1ZJ6Uqv2iTe9xLcsM+PWuV5iPf8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "09fa4e1f-c8d3-4b06-9266-0d9fa654ed8c", "value": 97284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "6d497858-f94b-445c-8e1f-fb68819a0d48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96240b98-da5c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "9a1dface-8096-42fe-8419-ab69a9ce0399", "comment": "Malware payload (Mirai)", "value": "effb4eb101074d256d3078ad435e4731", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "400b5476-e64d-499d-85da-68d52333d5b5", "comment": "Malware payload (Mirai)", "value": "1200075da17d87d7748d66dde17eceb0f75fb2a2a491da622db0cdd3a61077a1", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "af0542a2-8763-4839-a9cf-1e998b784361", "value": "T123831956B8819B11D9D102BAFE1E518E7313177CE3EE73129D20AF20778B56B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "414a8da0-4194-45fd-8b37-76d30c57d5ee", "value": "1536:VAn/44dJ83MF+H+gBQBlpFat8EgNdQZMNidPiUyVI7Z556Y2:kJ8o++gB4lpFatUWPiUyVI95k9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "0f5f3c57-e1ef-4a20-9e16-f865d76b51a9", "value": 83292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "f097c430-0db2-4959-aa18-6bf7f256764c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78231521-da4a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "b1bdf1be-8c4b-443c-9be5-500b7bf1ea50", "comment": "Malware payload (Gafgyt)", "value": "1025ea436c3c70dc425095864925c263", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "f76f7713-2c10-4ab5-a48e-9f8c8943ce2d", "comment": "Malware payload (Gafgyt)", "value": "bbbd8da54939b309d5355cb37e5e526d0fd504634fe8e17d5b6a79635a951028", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "62e6da54-88d8-4d6c-b216-94d2783ffaec", "value": "T186635B07B680D0FDC4E9C27407AEB53AE97374BD1239B66E67C4EE326D49E112E2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "4f2566fc-2255-456a-b780-dc2eddd75925", "value": "1536:TH+BOkyo/sx+en8bgut1o1bMkQXpoPo7K6QdajLV:TH+BOkXFen8b51o1bMkQ2Po7K6Qux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "8976922c-3e44-40f9-a2be-f2aab4dd7d55", "value": 71536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "97e99b26-3afa-4660-93f1-6a00200144fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "655aaa4d-da6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "7de80ae1-89d5-4ca8-a947-a44b4c162ced", "comment": "Malware payload (Mirai)", "value": "e3516a778b8de2e7b156678a4913b9d3", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "79c70f89-41d7-4981-b0a6-632e19cac3d8", "comment": "Malware payload (Mirai)", "value": "f641c646b09a47bce17d7c55b7323bb67bf16c151269d125f9615455955ab201", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "e80e80f9-649b-4e53-927b-6a39fd08bf79", "value": "T1D4633A81FD815A12C6D122BBFB5E428D772A53A8D3EF3213DD256F21338781B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "52f79032-332f-40c7-92b3-cfbbd50e8e53", "value": "1536:RyInVscyn8/CIJxc4xiA30lTadRaCrJ/:RyInVscy8/n24xiA7dRjF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "be461566-8ba1-4056-b617-f37d11c2d62c", "value": 71780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "21196010-c155-4ea4-a3ec-471e76a4b9e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2af3f76-da5d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737811444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "0fcb182e-0149-4d80-a398-47224a792964", "comment": "Malware payload (Mirai)", "value": "8b4d2cf17ee322b83dfef1df337f5cfb", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "1f96ed8b-426c-4f9b-8bce-853827a48475", "comment": "Malware payload (Mirai)", "value": "b4ab364f43de425342f4aca0f4b1986fcc8e88be840a4be9c4bd4fff3ea7ac57", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "48aae71b-233f-486c-860c-e17c6caff70d", "value": "T178733A81BD815A12C6D112BBFB5E428D772713A8D3EE3307D925AF21778782B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "0f63028c-747b-4614-963c-0e45bc1b0aa3", "value": "1536:vtKmE1C6/6yRvpjfsundePGf7pgYBbd2CRYTBvH:vtKmmC6CaZfjcPGf7xdDcH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811444, "uuid": "49107d09-59bb-4a05-bdb8-c8b9748a0439", "value": 75276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811444, "uuid": "a6e4c9d4-2924-461b-9dfc-aba6c3fcc5e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b734d4-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737811504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811504, "uuid": "eec4c4b9-8c87-4c4b-8ca5-20cdb2bc0601", "comment": "Malware payload (Mirai)", "value": "fcba0d1e76d270cba30c0e942882d896", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811504, "uuid": "c0e618c2-bfe8-4f4a-b084-c5c77cc21664", "comment": "Malware payload (Mirai)", "value": "b7d07b5cc7e45c5130af5037c7c4cf8db1ba9c0d48b405c43f8ee93af2d91efb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811504, "uuid": "9fd0afb6-96f5-4066-bf42-5c6534ac4425", "value": "T1C891229A3DB14F320D91EF96F231C571F56AD08144A08F99A4AF30FCB9BFE48A1105", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811504, "uuid": "b2c5e75b-0d29-41b6-ab45-4080ad1a67c4", "value": "96:1xyrDLxvcXgi5qHnzVLgbkLr7OLHXnUB6q68OoDCJqTFv:Gzi5qHnzV8bkL3Oy/TFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737811504, "uuid": "42d78d74-53ec-4dd0-a010-2860e4aca1be", "value": 4621, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811504, "uuid": "49c80635-87a5-42cc-83d1-e11272acf9be", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4b16f62-db22-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737812731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812731, "uuid": "9f57f0e8-aed0-438f-9abb-2878aa539001", "comment": "Malware payload", "value": "02bf4f6b6c08c7a46d50023a847ab756", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812731, "uuid": "28f50052-190e-4ebf-8a6e-caa7336c2862", "comment": "Malware payload", "value": "746b234cb25b39cc7c1b8bda929fab273dbb6c643dc3cb7a2aae426cfb412959", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812731, "uuid": "6d4b82de-2f0e-4207-a472-9636e86bb90c", "value": "T12231ED2256A4473AF3611B3BD8B64A35A13B7CA9BB42C92E80A141680533C10466EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812731, "uuid": "23832dc9-a587-4eac-bcc8-74ecfb1fd480", "value": "24:8c7LPEU13vzYLnzE58yHO9Cj+7SkUlbQvMPq8oUl5g8/wHcm:87ifzKzeO97fo2Biv0c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737812731, "uuid": "df751a8c-c7c8-4a03-863e-9e9589642b66", "value": 1807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812731, "uuid": "4bf80590-2e1a-4bcd-86a9-35abe822b312", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a755079b-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737813164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813164, "uuid": "8adcd558-320d-4a17-a053-52a7b8c14ad3", "comment": "Malware payload", "value": "d0950f3ec9bb8a614dc0735968f4201b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813164, "uuid": "333d11d5-30fc-42c6-a1ff-fbcd02030d72", "comment": "Malware payload", "value": "16fbfff0c36715c91d8c35bb47ec27706dd25c7c4defa32be5a293dad03e2058", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813164, "uuid": "48e1dbab-b275-4d2f-8570-498d6cb00329", "value": "T11E06121CD1037E33C967B2BE92A79202D711A48223D89ED766D759290B4F6263F332", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813164, "uuid": "97c9fbcb-450e-44a9-a718-f4372ac82672", "value": "98304:XhE57r6bTvA/DFxjtORpt94Zp1/Dxp7tQycK:qpMTY/xxj42t/Dxp7qK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737813164, "uuid": "8a760198-d432-462a-9a45-d559d73d52ee", "value": 3973193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813164, "uuid": "ee8f030c-34fa-4d48-9bfc-1d109be12fad", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737813305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813305, "uuid": "fed511ed-6a2f-4972-84a1-ce707ab5a8c8", "comment": "Malware payload", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813305, "uuid": "81d69c3e-1336-4c33-8fdb-3292307afdc1", "comment": "Malware payload", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813305, "uuid": "bc887f95-8f0a-4c3a-b6bd-efcb17c36b26", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813305, "uuid": "130162b2-83ce-46d4-8c13-c1221b00303c", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737813305, "uuid": "59eddf65-3784-40d3-bdda-d66b581df7f8", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a94e6c71-db24-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737813597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813597, "uuid": "e573a762-a4f0-483c-b584-d461990b6276", "comment": "Malware payload (Blackmoon)", "value": "c39f229c6b6c3e29ca6f237c0086da6c", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813597, "uuid": "5be65f44-67f4-420a-b88c-ccf6876b6a0c", "comment": "Malware payload (Blackmoon)", "value": "6d3ff72c3f369d2a9fef21c844503d6cc800a4f7d836ee70f02c310de8ba335b", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813597, "uuid": "bf073b0f-0b9d-46d3-9266-dbb7334bd2a3", "value": "T144E423BEDE8DE392DF59623EB20491C834848B1E6147DE5133C86ABE5BB1577AD08D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813597, "uuid": "13c32c83-ed10-4917-9b1e-5605a61b4ad9", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813597, "uuid": "acf50433-00a8-4e05-a6cd-96eae9287c51", "value": "12288:9RvaMR/fiQqyFuIuIdfM/UFlOk6r8aqxWSVr7whEesS3C8/ncAXCoSA:9sMJuIdp9kk6aN9MhEMfn1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737813597, "uuid": "012e0bd7-bfbd-42af-b271-8c29db4bf6f9", "value": 684544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813597, "uuid": "19af71d3-953c-46ce-ab93-5b2ee51511c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b716e4f-db25-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737813950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813950, "uuid": "837c9d60-f07c-411e-9941-62d809e5720b", "comment": "Malware payload (Xorbot)", "value": "b5be82345a9a95664e4ce3a313196e86", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813950, "uuid": "65d9e073-3708-4b52-ac29-e7016852dca9", "comment": "Malware payload (Xorbot)", "value": "70054abeea8169581887eb381d7a63e02cf3c591b3dea6d338ed9744090ece00", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813950, "uuid": "53c8c537-a9d4-4b16-9c74-159ef2f074a8", "value": "T11822FBC9274420255CB1CF1E75A81CD01915BCC16DDD8DA8A5C879B8C28EFBFB8D3E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813950, "uuid": "18d0685a-251e-40fa-bf3f-f988056a561a", "value": "192:JuBiV5ZJWv78Cpt2DLZNKG5YQ+fh4ZJWv7hpt2DLRKG5YQQf4:JuBiVjCpt2DLZy7pt2DLZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737813950, "uuid": "b36cf4d4-2744-4c62-b14a-f03dd46d27a1", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813950, "uuid": "48793692-e6ff-420a-b297-8906e3b56288", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17e24277-db27-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Worm.Ramnit)", "timestamp": 1737814642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814642, "uuid": "9eb594b3-5fcf-43e6-9edc-406f18e2e450", "comment": "Malware payload (Worm.Ramnit)", "value": "addae446df97b02dfc6bc2e2b52a871d", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814642, "uuid": "fe1dc5c7-74a7-493e-971c-952ccb5f2e71", "comment": "Malware payload (Worm.Ramnit)", "value": "408029f0929b11fa51d7bf484ec0fbbcf9d61c309207d3e55ce48c55caf8898b", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814642, "uuid": "50df9fca-e6a8-454a-80f8-1273253af28d", "value": "T157E433E26D2A7F1AD85724F0CB6B53847C95C91F9AC0082E2F76B53FC0BBD1A6C126", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814642, "uuid": "f008f77c-0d5f-4be4-ab9a-ffdf1667893f", "value": "58c9c00d3939ebafff3381f83aa8d6e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814642, "uuid": "8180b019-f12d-4410-b17b-27e39e3491b7", "value": "12288:4sDp2pLNWWstGnb/pbflbrfWsYIzdnqR9OSHuLOj+RH0Djt8t5zyJR84oS:hDALA2NJbrfbxzdnqR9Oguij+6v45zO8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737814642, "uuid": "82ffeff7-b53d-488c-80d5-9fcf12745062", "value": 706560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814642, "uuid": "e365b4f2-3d64-4cb4-a8c2-5e1397ccca9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f69f3a-db27-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737814956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814956, "uuid": "4185f80f-0231-478b-89d7-db69446fadf7", "comment": "Malware payload", "value": "8417b37df99031cfc84e96c23f35ffe2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814956, "uuid": "216b811e-23ea-42be-8301-923253ad188f", "comment": "Malware payload", "value": "329100015ad49c2cb7dab0a5ee716af98dc6257a5b09ab71641095254a080de7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814956, "uuid": "037a8444-38b0-4a64-a2c3-a3fbcf5b279d", "value": "T1ABA38D1533D8C62CC2690B74A9F2D3393774A642F867C70E8AD05E8F79733068D566", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814956, "uuid": "7e3eb264-b4c3-4315-a46b-b0fb963735d8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814956, "uuid": "b01c8715-ce28-4029-84a6-f01a4e62569d", "value": "1536:Uuw0YNzOVengGaOXlnFjZHJqtBy3db4qThUtjGtv4n4PZHJqtBy3dbbZH1ttBc3d:i0YVu09vXl5tktGFdcGNtktGFtXt4d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737814956, "uuid": "549915eb-bc47-4681-886c-5e9742e0360b", "value": 104960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814956, "uuid": "f626a0f5-77a7-4799-a6b5-248d31fc9e57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6714083c-db28-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737815204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815204, "uuid": "0da234e3-196f-419c-a085-9933c739f812", "comment": "Malware payload (Xorbot)", "value": "2120b8357feaafc8b3d9de5c83dc5796", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815204, "uuid": "c96531e3-e09c-4f63-8be2-16f4c70d7fd7", "comment": "Malware payload (Xorbot)", "value": "e1eedf187f0ce929048778054ca96f61fcb34e7942e18fb64bf8982513e19e86", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815204, "uuid": "bceb4574-581c-4a16-9061-21cd65075d61", "value": "T11F222FCD07C03E365C498E1C65B5BD11219388C2EBDB79D4A9CA6D71A288F49FE56F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815204, "uuid": "6ed0b87e-4565-4135-aa45-930a642b71cf", "value": "192:9x1hyNmWWv7n9Wa2DLZZt55YQ3fQPmWWv7DWa2DLst55YQBf4:9x1hy09Wa2DLZwaWa2DL7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737815204, "uuid": "653ab515-de87-4b2e-9690-4c2384b569a4", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815204, "uuid": "1f5d208f-1169-4374-845e-e08376120d0e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049832d6-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737815468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815468, "uuid": "4ad33270-e359-4c90-975b-f8faf0e85b65", "comment": "Malware payload", "value": "ddc5b4b4fddb24695a5b48551afbf277", "object_relation": "md5", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815468, "uuid": "43db74b4-fb6b-4df9-a93f-9a0998af6219", "comment": "Malware payload", "value": "aeca594dae0ae8bd9f93dcae17686c910898cee59f39ab0c19f08e8a259f74d1", "object_relation": "sha256", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815468, "uuid": "d65bf175-b8b1-428c-a5d8-1e3745ae1895", "value": "T1F317330AF1DCB862F027D613C027F960D5746339A0A607AA5BA664BC3D739450EDDF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815468, "uuid": "e15b39d6-c801-4a33-b0cb-ba929cef7d34", "value": "393216:EesDV4xtur50vLVRUkcpTmMiGOQ5ZGvhTMgPtrDgHAIe:Ee/xte5cjJckMjXEMHm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737815468, "uuid": "44ec98df-c687-4882-ba56-df064906d432", "value": 19785976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815468, "uuid": "baf4a680-6e26-459c-8dab-f899886e46c1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b28374-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737815544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815544, "uuid": "8426f98c-d27f-46f8-9d51-c092828a3d78", "comment": "Malware payload", "value": "f9267201608c495377be24cdc21bd965", "object_relation": "md5", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815544, "uuid": "355db697-19e1-421f-a5d8-77bd598f16db", "comment": "Malware payload", "value": "19b85cbc473d477c15c98338a549bd53f60833954728fa75a1a3447545bf97d5", "object_relation": "sha256", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815544, "uuid": "749bdee3-4de5-4675-9cf2-c6b79f6a6d50", "value": "T1DC673397F758A92FC87754F2496D5331124B4D428E939743AE58330C68BBAD83F4AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815544, "uuid": "5f679727-1277-48ea-9d63-2ccf3084f1c0", "value": "393216:MOYv61eWEv/LeNG3fog9sbZQs1BUvu3XQQNZg49RzT2Rl765t2bwaS/dWk58jzFv:MM+DeuN9IZQqU2nRhzT2RNUMiXOzxVt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737815544, "uuid": "1bddb64d-1c8b-42f9-b1e3-6ad53f9d0741", "value": 29845053, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815544, "uuid": "18f7c235-07cc-46cf-82df-0b8011b29367", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7f7e9ae-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737815823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815823, "uuid": "f20bf65f-b39c-4a44-a61d-9baf4b82d47f", "comment": "Malware payload (Mirai)", "value": "99e90ead98720d05415d5f26a5149396", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815823, "uuid": "3741a62b-f65b-4b96-8950-17019de2a408", "comment": "Malware payload (Mirai)", "value": "cb4255c05917626e7855d9214d3d023cd02257893388fa3acb70c2392aeec400", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815823, "uuid": "6e8a1d1b-38d1-4b9f-980e-580e9e6da5ee", "value": "T1BE230271490E9EB125303C76EB9593937AE029B5C6673013DA2D0A382F75B131D57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815823, "uuid": "67cfadc6-425f-4629-9057-ab7ccf64380a", "value": "768:S/TYCoIxdEk+AxoTZAZHFeq8b3B39q3UELbUXfi6nVMQHI4vcGpvh:SECFd+A6YHAxwLRQZh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737815823, "uuid": "bf73f5a4-e0e0-44f4-8e5c-65a31810ad4d", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815823, "uuid": "5bd84c1c-cf44-4c26-9ba3-0f709042440b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a7a5848-db2a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737816042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816042, "uuid": "132a99c1-b086-4b1b-b750-dbdac3e039ff", "comment": "Malware payload (Amadey)", "value": "6751e10199c441bda11a9e98752a0f3d", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816042, "uuid": "a8e028d9-9a74-44fe-917f-effb80292252", "comment": "Malware payload (Amadey)", "value": "31ad1aa3f18880d45d5108406401f6a66d2f31af5f436210e4bc7a5340435c7a", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816042, "uuid": "979531ed-49d4-487f-a17b-b0cdd494063b", "value": "T1BF95338B669A0527FD7ACAF248E28F41FB2A44B950296C8943033253E43F5D3F7BD6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816042, "uuid": "910d0c20-be5d-4d36-8fc9-850a54a8a373", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816042, "uuid": "bdf46102-ff2d-4588-9b6a-3289522859dd", "value": "49152:PaiAnNAosgJDBu3kDKRew6XozYq3vgeXN+7VSSPJyk:PmMGIxRe4NmP7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737816042, "uuid": "744d6cdc-c670-413f-aa25-d97fd0efff86", "value": 1917952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816042, "uuid": "e3d5d1a1-becb-4ff4-b85b-05d9b4705f88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87798611-db2a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737816117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816117, "uuid": "acee5a8f-9820-4053-98fb-c9d257942a4b", "comment": "Malware payload (Blackmoon)", "value": "ab10fe0f21b0c7da97312d09adee77e0", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816117, "uuid": "f2198e87-2a6e-4b07-93b5-a98d3aa557ee", "comment": "Malware payload (Blackmoon)", "value": "e944bb6130cb8e81649d7c275425fd5b4b031b55ce88812e853f572eeb5a8773", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816117, "uuid": "ee3bc709-5318-40e2-b87f-ccaa7727c8fd", "value": "T11BF423A372E3B01ECAC250B289A5B77C765FA7F48757ADDB44E81F8318753B41268E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816117, "uuid": "138954b6-fa2f-4378-9f23-bbb6dec643eb", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816117, "uuid": "cb5baba0-6af1-41a3-8d82-1bdb88f7b809", "value": "12288:vyR+lBVQkfhdtxTL2Tb78vC64fU5TOkU3ObbQSkhtzUdvRFVwEmg4A+aMoS:qR+bVTfhzxv2H4vg+yk5bb3kgfv/2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737816117, "uuid": "15c3c530-d9b0-46c2-bb65-8c2252bdf886", "value": 754688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816117, "uuid": "c40c79e1-750b-464f-848c-f3db8b8a2e4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737816396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816396, "uuid": "ec3df14c-7ba2-4e95-84d7-3fbfe88c0993", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816396, "uuid": "4aafca5b-6af5-4c84-9f15-c7b70bd0e041", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816396, "uuid": "cf6f0ee8-3394-4983-9f2d-993e7c513782", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816396, "uuid": "de3ff5f5-7483-41dc-85a4-3e54d729c4f2", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737816396, "uuid": "0945e590-059e-4662-86bc-3f0e2477825e", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55f92470-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737816464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816464, "uuid": "b1d58844-f1d8-4afc-a4a3-4f7b99c51c6c", "comment": "Malware payload (Socks5Systemz)", "value": "abd9bc3d170a43bf126aef72ec534e0a", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816464, "uuid": "7473e05a-757a-45bf-888e-64732596f382", "comment": "Malware payload (Socks5Systemz)", "value": "e7beb41219a594be52b28373db87756eb448b13f07c60e36c4220bf149d6df2a", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816464, "uuid": "166dd973-f146-4fff-b513-6468be8c3ed9", "value": "T155063307E12245B5E2F46DB70E3CE1D6A565BD420EE50112B4C9494E2FB1BCAC8EA3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816464, "uuid": "18b419ab-14be-45d9-a111-733e3fd69839", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816464, "uuid": "29068eb8-d382-4080-b46a-9d8c5dedc90e", "value": "98304:4FuKELSNEcioegXvUDSCaNJ67oeoyhiCvWB1XVJtyj:2u5LwEPo7vASCaNJ67oBvCv01hyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737816464, "uuid": "218f1989-c747-4300-b0e4-07e7fe2065c3", "value": 3681602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816464, "uuid": "37eb40c4-248c-4888-9c0b-03b13d5dbb21", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a8b734-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1737817386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817386, "uuid": "836b5e5d-933f-41c0-b99f-e17e61c98af1", "comment": "Malware payload", "value": "f57fb0feafebe84525278fe2d083cdcb", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817386, "uuid": "54426389-fdeb-4903-8a73-d7f749868681", "comment": "Malware payload", "value": "ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817386, "uuid": "da545011-cdea-4da1-8038-3dfb4cc0c096", "value": "88C313CFB6313756CB5069AA41D683EA2B7E3CC09D318F190ED16F965374A5363CB480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817386, "uuid": "afe34f32-8575-4d77-af49-9a5d8842bb3d", "value": "3072:cGgdcsaktkt9SqRD4jEFwVIG+meNqZsMdynPsi:5FmtQ9SoOGXRmegWl0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737817386, "uuid": "ac0c37a9-9242-46c6-ac7e-e31a76ad40b1", "value": 123784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e9c4510-db2e-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737817767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817767, "uuid": "ad3118c7-10db-46fc-9816-6c70f5116ffe", "comment": "Malware payload", "value": "2caae126445f31107d809ffe01081b7b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817767, "uuid": "494c80da-37d6-4d89-bd02-dc8832908083", "comment": "Malware payload", "value": "2c1fbb342af98b10dcfc8c6993b4fe4bb6717ab12f89fd8cc585fe009fc1bdcd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817767, "uuid": "73d9db9f-1afe-4e52-940d-c3f742f9d6ac", "value": "T17312628775841B12C6D826B582E3642943F4B1D323F3F24ABF535E6529A37E96C08A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817767, "uuid": "fb62b6d0-feca-4bf8-9c3f-12dc41d5fe6c", "value": "192:2GantWQ8yuquIeSey+1BXD7m8U4PZlZVQoV+xWd4QkNEIjVkDOZFEIbwGyVXef1n:2GEV87rwj+1BXD7m8U4PZlEoox24XE0p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737817767, "uuid": "87385efb-b5e7-423f-8847-077c171d17dc", "value": 9519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817767, "uuid": "3cef66fd-b384-44cf-a003-90182b01ecc3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8147176-db2e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1737817890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817890, "uuid": "1736b459-8e99-466d-ab20-e75fa57a76b4", "comment": "Malware payload (Blackmoon)", "value": "83d476bdab5e677bea80fbb6174a880f", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817890, "uuid": "3d7485a7-8602-4a4f-a59c-6eb0b86ab82b", "comment": "Malware payload (Blackmoon)", "value": "aa9c3dcbf4e00edae59f37b83fe4a7fdea4b7eb761cb29f399dd7fcf6715c5c9", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817890, "uuid": "dd91e973-d259-4369-9795-9acd55b465be", "value": "T1D8E4234BBDDC2941C22317792747FA524FEEA2A44B71939150353473EA8BEB8E1B87", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817890, "uuid": "3cefa27a-d558-4640-ba1b-5f1fbbccdb0d", "value": "db849d92658239f75dc6b02e890de92a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817890, "uuid": "687b3dbc-4b73-43d2-b271-3ee7665b6e32", "value": "12288:9tPiphBGuISSrb8ZsiLfW4HmoYySSekE6m5qnlmXxRxstxvX067hpvXOR68i7ylZ:9tPiphMpSS/0sMfH0teE6eqlJXX9XOMV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737817890, "uuid": "98baebeb-f2d8-4ac6-afea-3f96b59cf4b8", "value": 720384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817890, "uuid": "4fe0a176-e6c7-4471-b85e-e34d0df97147", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a5627aa-0c42-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1737817919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817919, "uuid": "5b820834-2784-494e-8de1-181fdc3a539f", "comment": "Malware payload", "value": "8437b5014f973dc9239690d9eaf2f6dc", "object_relation": "md5", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817919, "uuid": "9b50ac07-ee2c-4017-ace7-552bd1c3fb2b", "comment": "Malware payload", "value": "25072f209bbeffb3a386044c0946e2eac1a56f540bf6b779df9cb20abc3fba9c", "object_relation": "sha256", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817919, "uuid": "e84a543a-9db1-45ca-8726-242e931da479", "value": "T1A2B2E19117923559C332CBBC3B69381FC018655371AA5D402D90A65AED5BB248CF8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817919, "uuid": "91b3a259-78a5-4f5a-b716-d75a216de8e0", "value": "384:yb2eX3zAKuiNPZRwwqdvrrduMXbCAk6Y5VvCYxy0kJY:/kAKuobq1rduMGAXSEYEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737817919, "uuid": "f3a3491e-924a-4a59-9171-4e09bb153346", "value": 24208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817919, "uuid": "f585df9f-a434-4c84-9266-c9ad6ea2f692", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "452ad02c-db2f-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737818154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818154, "uuid": "bc8248b1-01a3-4a97-8aa0-1dd3338a1b76", "comment": "Malware payload", "value": "36f69a6b7060946f0d87679bcf34758d", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818154, "uuid": "441994af-e19d-49d5-987f-82d0219ab6ab", "comment": "Malware payload", "value": "eb6b4883ddb80e0e23cc483c929ed9588f91ee27045d64a52deea14790b11fce", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818154, "uuid": "10e790af-d5d9-4b58-90ee-22133f370519", "value": "T1D594C527F2500453C96DD078C70E51A7432EFAFB1721FBB6B16552203EA2E6C6E2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818154, "uuid": "4ef6da75-6614-4c40-accf-b9acc04515b1", "value": "6144:DqryxnFOCbWomKaFlZ9UpCjiNb1/Wcg/8IMmaD0KRLIdUHTKPiFdSvdJLLTonRqV:8MMXYaLZ9hiNb1zg/omm0CyYofToRqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737818154, "uuid": "d6746ce4-4d71-452e-88d0-097f561872dd", "value": 410873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818154, "uuid": "92946fdb-d28b-444f-87ce-0a4ae7a2580b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83a13364-db2f-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737818259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818259, "uuid": "82a7a00e-c319-472c-8dbc-f9e1be0077e3", "comment": "Malware payload", "value": "9021ada4db47b86a3cf3fe36976121ed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818259, "uuid": "d9aacb4b-ec89-4eac-88cd-571f85c5e5ec", "comment": "Malware payload", "value": "0127087022dce4afc4683300dfba4887fd42839acfbe8fd0de2b0724221d1732", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818259, "uuid": "27da9c7c-aba3-4c51-b180-020d50746e41", "value": "T13326BFA9A3827798C633747EC465C3A00A773D15A736C32B295FBB22A1471A4DE507", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818259, "uuid": "aff0e426-0dae-4a1b-990f-5bb50536c20e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818259, "uuid": "bdd67c38-07ed-4cc3-a431-5361c61ff2e3", "value": "98304:ajjh88mbmIklyX+9YIk1QnRTsL7HamcKFtQ:y88mbmIklyu9YIk1Ig7HBXFt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737818259, "uuid": "c4f0bd9e-bf9a-4cc2-ae6f-8a8744580a4e", "value": 4738048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818259, "uuid": "7db439a6-634b-42ba-98f4-bd9221154743", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d8e7d85-db2f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737818275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818275, "uuid": "3add42fb-ab81-479d-9632-e4c85b5b3b58", "comment": "Malware payload (Mirai)", "value": "41de0463e22eabb06861aaf3b28a5e50", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818275, "uuid": "accca27a-4912-4585-85ed-29fb73e976c8", "comment": "Malware payload (Mirai)", "value": "7308d85aa1acfcb9800f78200674f8b5497d3838d5170ac5e3717118f1634984", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818275, "uuid": "d2be2295-2618-4216-aa0a-546969362c40", "value": "T14C51939A371743302E66F4E3B9E90858B3D6E4E6D4CC9ED687D878AD844DF0CA0C09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818275, "uuid": "ba93bb77-90a0-45ac-b665-bd84e075c00d", "value": "24:vCzITCiPz13C575wtCn8B5LCIRD1CX7Xw8sCubpCiPFCFmRC5ixbCox9C5UTcaCb:vj52dCnx5F7ZbVKa0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737818275, "uuid": "4b8bf085-2943-4029-9d46-aa15563fa468", "value": 2575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818275, "uuid": "fc8d1d63-ccdb-4b95-a6b4-4e148194856e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e33c1e9d-db31-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737819278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819278, "uuid": "06296fae-3f3e-4adc-a1d8-e81aa2ef31d9", "comment": "Malware payload", "value": "88616f9739dc18735b297436dc7296ba", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819278, "uuid": "5aab288b-7d74-4543-a2b9-076b719d924d", "comment": "Malware payload", "value": "560b5d085c1ec1f8d2e9046f83a22e0dcd28a5e3290a703b16e2fb8bfee081f7", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819278, "uuid": "77a4cb61-2f1a-476c-a7d6-2fe36d2c2c26", "value": "T194A45B06EA9298F6EE430230602FAB7F6D3692155429CDE7E7E0DF305656602760F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819278, "uuid": "32489132-cdc5-4c4c-a820-3ca70f2d6d97", "value": "12288:T+o1F0mqsVVriug9C/MbUVqA+EaOr1h9cQqNQoq01T54KU/0JtwPg:71SmjyoM4VqA+EaOr1IQy/0g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819278, "uuid": "6113a798-3ab9-40db-bb88-c8de0b071b31", "value": 460747, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819278, "uuid": "4c447b8d-5ff4-4eaf-a7bc-d55131615491", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "160eec21-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737819363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819363, "uuid": "4e22e76a-3c6d-46f2-9525-c285669e5d7f", "comment": "Malware payload", "value": "793a3b50a2a2fc653db86cd4035f9aaf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "PING", "colour": "#be4099", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819363, "uuid": "4d1dac95-76bd-4df6-a9c7-e051f8862cfe", "comment": "Malware payload", "value": "d317e9dd90efe6158522a3126a8dec707e3b64e864bd755bdffa06a12ac2a7fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "PING", "colour": "#be4099", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819363, "uuid": "849a6a8e-a68b-4c8d-8028-50f50795edf3", "value": "T1E63110CF21B10AB46CA4ED2BB2AA480475D6F1C614C71F6D29EE3DF9648DE05F400A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819363, "uuid": "41ecaba9-bda4-43b0-a822-26c58a2471a7", "value": "48:v2F2J2x4k2Vb25f2V/2F2l2J2KO2bZ2x2q:v2F2J2x4k2Vb2h2N2F2l2J292F2x2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819363, "uuid": "2618cb23-47b9-491d-bf6e-700941e73ab5", "value": 1587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819363, "uuid": "fad1f8e6-2681-4052-825c-f5d296f2636a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5e3859-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "28839b09-b890-4dcd-add0-5313770934fd", "comment": "Malware payload (Mirai)", "value": "655f5b39bb955e788bcdbe4c5b1c7696", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "caecd2e5-7074-4de7-9b4c-238b2671bcb1", "comment": "Malware payload (Mirai)", "value": "e29cc70cdeb4fcf113750f1d5adce877c63c9295f90f3a35ceb2dbf90f20bd1f", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "bd06558d-3925-4022-afd1-a833496d8138", "value": "T1EF833981BC41A622C7D21677FE5F018E371553D8E2EA32078C255FA03BCBD5B0D6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "7a8330cc-d337-4144-becf-dc269d6e04ca", "value": "1536:j01gPv9OCDGQvZUsKm+x33eZtU5vWmaPNeiiW/cHvgi:j01gPv9s5x3wgaPNF1cl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "70781343-89ed-4a6b-873a-bdf5a9433c4a", "value": 88408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "b76b6af4-4b00-4275-a494-840816151752", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5f414c-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "3ef6d690-3428-496d-a766-0907a2a206ac", "comment": "Malware payload (Mirai)", "value": "7e9575d0d90ddc08d78ec9cffb47171c", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "0f0966a7-65ad-4d99-ac39-dff61632d7d4", "comment": "Malware payload (Mirai)", "value": "b950cae8893e146fb7e420d8587dd12f0f07e19ac140f9ea68162401e8dacdb1", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "3e100865-36d0-4a32-8ae5-4c2ee22d6349", "value": "T140A32A86BC419A11C6C10677FE2F118E331257ECE2DE73138D245B607BCB81B0E6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "7e587d6b-8c1c-43d1-a420-72935a1b29b8", "value": "1536:uxnkY3RS4sAjoGiIANTThKcng5zVMN68CPJadO5b8MVicvwR8KRz/5bYi:83c4MGET1chMERRaGvwR8KRz/xF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "70207225-3a3d-4ed8-8999-865f5322add3", "value": 99468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "cfe1c4f0-861a-49f5-90af-ec7d9278d232", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a60966e-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "b6041825-ed09-477f-9fce-a29dea13bfae", "comment": "Malware payload (Mirai)", "value": "abbd3d2f4e2e03aba9762fb809c9a5d9", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "99098ea7-3bfb-4fc2-baf2-965b6432ffc7", "comment": "Malware payload (Mirai)", "value": "0cade2650db46f218e097e9dff947edf7ab4a1fe6595ca66fe0b8c3e44d948db", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "fc13c3cf-1cad-4de3-bd78-4438cb5b3906", "value": "T137734BC5B5C3E9F4EC16093D307AABB24E72F53F6139EE97D3986423A942602D6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "1121981e-e1b4-4324-8b5c-29f8bd63fbc6", "value": "1536:GD8VBnK13Rg74kwVJStv0l5xAOHItu9tpGZp8GXPTbVhid/Sb:G0BKRRg74kWS90lok4uHsj8G7ZUdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "82112a2c-b4ba-4876-8255-9dfac3b4b661", "value": 75120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "af72e230-042d-4fd5-ba3c-8c7d5c292d6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6987dc-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "32efe892-8d29-4e71-8a85-b5576e95483e", "comment": "Malware payload (Mirai)", "value": "eb147cf53ca0bc2b0f51830fede5facd", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "019fb998-e1ce-4d12-aea5-78ec948cd78b", "comment": "Malware payload (Mirai)", "value": "b97a2b8cdd5ef95c4ef37a119ab165bff3635d4d99f60983fd204181ef1d2184", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "54744cbe-611a-4c0a-9941-837978de39e4", "value": "T176F34D46EA408B13C1D71776FAAF414A33229794E3DB73068D286BF43F87A5E0E576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "a997ce48-cd3b-4553-b01b-ab67252be6eb", "value": "3072:YsfvqoYF/ZrhMZVfKPaC+LKWK6nTUCo4MbPbFJJM/9YM:Ysf/YF/Y7yPaC+LKWdnEPbPbFrM/9YM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "d20145cc-07a4-433e-ad5b-8c9194316fe8", "value": 167214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "5c15f0d2-53d2-4d7e-b96d-bb2845b56547", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6b78a7-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "047ef8dd-1270-432b-99fc-2d48f006bfdf", "comment": "Malware payload (Mirai)", "value": "00af0939baa7d1957484ab41ef2a21cd", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "efff6ec2-6a5c-48b5-835f-2accdcf4de7a", "comment": "Malware payload (Mirai)", "value": "68c9f771d2b899e1576060887570c1357ef204c5907ecfbcf09bc6cb2f2b4934", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "2e2066dc-563d-4405-8647-0403b9ae3cca", "value": "T11073AD72E1686DB8D0654A747E988E729B23A48052D33EF6E781C7650413DECF40AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "36e49693-9b61-430d-858f-af32c62860d7", "value": "1536:3aL/3+5hmwtIHKyNonD21rB9X0rrn9AqkweKSbEZpp9CbwhT:36vkoIyNoDkX0rj9SwRSWp9zT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "2c21d6d6-f5fc-43c2-95e2-269e3ebdc7b6", "value": 78976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "eda3ae69-f806-4c8f-be04-443b79b36732", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6eab7f-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "0c44d92c-df11-4b9c-84ce-235b37776d1a", "comment": "Malware payload (Mirai)", "value": "4b4b0d12307f1afcd2b5d974626c42d8", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "6151ebc4-bea8-46ab-a6f8-4c627752f94f", "comment": "Malware payload (Mirai)", "value": "ec330504add00a90149feadf56c42e640d2cceef422cc20ab2d55f0de5cc01f3", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "38472985-b739-4d66-be3e-1a337b9ae979", "value": "T1A9B3960D7E218F7DFBED813857B79B21965833C927E1D585D0ACEA021E7028A741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "92032d5c-165d-4489-aac7-a36d9bf2b4bd", "value": "3072:7gSfmqSBUF8gipNeRFGZWN47E17m86FnTPOvhu:dmqSBUF8gipcaWN47E17m8ET8hu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819424, "uuid": "932a4560-3189-486b-9482-b6f7274f8c26", "value": 108964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819424, "uuid": "645dc423-1445-4cef-a1e8-959325ecd3d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e0f2baa-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "b75c8789-5c03-46d6-a76d-7be4d45e275f", "comment": "Malware payload (Mirai)", "value": "2538582e112e9f2b20918e0a84437aa2", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "9abf965d-d6cd-48ea-a164-2ed42335d845", "comment": "Malware payload (Mirai)", "value": "27754a06a4bcd3ac8bd07d670dd206e647cedaef5c554f16824372a50b921804", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "677e2bb5-c8cc-4957-ab42-4f89abdf983c", "value": "T1E8B3B40ABF611FF7E8ABDD3745EA1B09249D510B21A87B75B930D818F25B60F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "ba005e6c-ff2d-48a0-816c-079a5c7efc9b", "value": "1536:sAcC99ax1OOEEXl36ZnMiNj7GYNGmFPCQvGgscOYgtZ8Tm:sZC99axQObaMiBugscO9om", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819484, "uuid": "2d19342b-fd27-493e-ab25-6de61b981976", "value": 108964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "d3a83020-9596-41d7-befa-86ced3a3ff48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e128ac6-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "a6366620-5492-441b-b4f3-fdfa9c74ce56", "comment": "Malware payload (Mirai)", "value": "bf979ad3108d1fbdb5e9903d11f05970", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "2c2b70cd-ef7d-4e27-8513-3e6581bb8e42", "comment": "Malware payload (Mirai)", "value": "638f3952ed3333eec5c42d9dcf0d058a0718c2708e32f44b805926ebba1f1b46", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "42cffd4f-cb09-490d-aa7c-29ac07a297f0", "value": "T1BA934A25B8391E27C0E4A17A21F7C712F2F1238D25B4862E3E710F4EBF656407956B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "bfda9856-b491-400f-a9e2-a5a6d45d8369", "value": "1536:RW+K+V0Sli9mz+W/uatkLOvGTQ4w9GXh75K4q2tjr:gUWmqVTVw0XhVKsr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819484, "uuid": "d1bbfd90-a61c-480f-946d-4e50fde64f5f", "value": 91276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "17f3f140-b3af-460a-8734-310ee43c24f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e16c7c2-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "02700515-4bfb-408a-92d1-3bd2cd699a53", "comment": "Malware payload (Mirai)", "value": "4636a06fba0b77a10443b040d76d92aa", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "1090352e-00bf-4885-a140-87ff5b021f94", "comment": "Malware payload (Mirai)", "value": "1a608bee335817a9dbf0a5779732e501882f5fb663f14dc0752f7a55bc8d38a9", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "bf707a4f-5c95-4d8c-9e9d-44df1efbfa9a", "value": "T130834B99F401DE7DF48BDAB640270E0AB93162805A930F377767FDA33C320999A57D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "5aa99b31-b610-45ba-b193-ff955d4a59e9", "value": "1536:vhtETs/Tnrt2o0Fue8Olpli53aWa1Bq8NSLiO4LWgsH9YOKnPAtRSEZpZ:vXvtSFuqwYh1Buea7YBrEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819484, "uuid": "280adc94-40da-4c0c-b3e4-38f18b9b24ef", "value": 85476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "f9c27a7e-17d0-4dd2-8c11-67f8c8512405", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1aad6d-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "c4a9af37-a2c7-4a7d-8a2a-8f63f8b89eca", "comment": "Malware payload (Mirai)", "value": "735f05276461e813c91dca38ce9ae406", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "147d127b-980b-477d-b3a6-ada6f4e1475b", "comment": "Malware payload (Mirai)", "value": "99f2a865df529051d1224235e05a8a825c6c7c756ba1d3d4a90e7cba29e4b18d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "66f80b9e-1403-403d-9a31-89c152207348", "value": "T18F734A01B3184E07E5E61AF4393F1FE197BEE9C022E4F5856A1ED7465272E33584AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "551713ac-2d94-48fc-8f5c-429e1933d50c", "value": "1536:LecvZ1h6c3UB8Aq+9HKRyu5ePslkGHSesujvOT:LeKkBpq+9He8bASeHjWT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819484, "uuid": "ccae2ffe-78fd-4306-814b-e021f009f784", "value": 80360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819484, "uuid": "9a909924-f40b-4b19-9cfe-31d06864d1b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "815e1e6f-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819543, "uuid": "9420b250-8e3c-4226-93b0-f4c7796b9797", "comment": "Malware payload (Mirai)", "value": "a470699a45b913100426fe50750f6bd4", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819543, "uuid": "610e1e9f-f0ec-447c-b535-c71f038d742a", "comment": "Malware payload (Mirai)", "value": "4fad00824c18fcca0ba9b8261753905f2c92a0cb1de10cbc313c94004d7de589", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819543, "uuid": "75ff8846-eab8-41a2-9b81-09fd9551e18c", "value": "T16E53E7C1BC41A629C7E01777F99F559E3300A7C9E1DA72178C240BA47A8B94F0D57F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819543, "uuid": "15b9c865-fb90-4880-a51e-a085307cc2ab", "value": "1536:jffgHhV2gKLExnNrnDKbNtl33eZto9aocsK:jffgHhV2amF3w9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819543, "uuid": "6db6d940-fbc4-4ebe-8427-41f0c7c6ff04", "value": 64832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819543, "uuid": "682cec28-81b8-43ec-9eba-797f6166d7cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd0b45bd-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737819663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819663, "uuid": "46a65bdf-33ff-4751-b2a8-6997bd5419a5", "comment": "Malware payload", "value": "a92de88bed73f04df320c2d695526dcc", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819663, "uuid": "27db3a67-8ae4-4865-beee-b899d3d5636d", "comment": "Malware payload", "value": "734827638fe20dd2027bb227c52fd27a1ead743bdf885a75a49b1111e23b2171", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "84257029-66e3-46e1-ba4d-16784e49094c", "value": "T1694523B7BE2C5AC9FDC358B912A352054E5F3DEB0B5C434A40B7562358DE224E26E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "6dbcb76e-ee0f-4fd2-9f14-009760ae0d74", "value": "24576:Gm42sckx2jEyBDbkGrjGk1ifqZpL2V/sCJh6tZgSeabFKszG8caKN:ibGbkEjGkzZZ2VkCeoFMvzdca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819663, "uuid": "d9fa306a-f2ae-4c7c-a164-3dd75ca10891", "value": 1249063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "36652f8e-509b-4fef-9311-26ece7667d46", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8fe0254-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819663, "uuid": "a18c9884-83d8-44c6-a41b-cda66e2c1552", "comment": "Malware payload (Mirai)", "value": "17dd5d8084206f6fc1220c00f306c8a7", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819663, "uuid": "42da8783-f5cc-415c-a93b-cfa2d743a029", "comment": "Malware payload (Mirai)", "value": "c2714ff4ee98f85de0bb1db36fe0686bd252712fb57eddc3feb4638903c288ee", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "080288ae-8674-4966-908a-ba2b87cd1125", "value": "T18551918642B66D3829AB7A13E7B761283081D092ACF1FFD5DAC4BBE8074FE5475407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "399f66d4-7738-4134-91f2-6fc0192c215a", "value": "48:vM7z7N7hMu6GMgGzPMeKWMYoUM7Y7o7UMfR3bMD9RMkcgMXpVMGSOMq+CMhfTMZQ:vM7z7N7hMu6GMgGzPMeKWMYoUM7Y7o7g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819663, "uuid": "ea3e12d2-22d1-4c60-aee3-f4bf7e6dead4", "value": 2910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819663, "uuid": "0a610e2d-6951-4478-bf6f-ce061886a12b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed322140-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "e5df47c2-3278-4d0e-abdd-0665c1419fca", "comment": "Malware payload (Mirai)", "value": "8a91963ba828a9fd215264b4c3fc60d9", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "4dc4dc69-b08c-4049-bf5c-372631aaa074", "comment": "Malware payload (Mirai)", "value": "0f6c48a801cbbd3c14231182dd7fca4312e50be9ba64a108d0370dd5e8cc29ca", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "52a9669f-dbbc-48f1-92bf-258fea963ac8", "value": "T1CD33FA8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "f3d58f39-aa0e-4c41-b4d4-fe1c45443e84", "value": "768:gduPBFnHooqR8qOCKq2cH4/te+TK806MMUVjzkfQXObHud2oGh:r/hqaJMeteqK806MHdkfQX6HuCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "82c43652-1a6b-4263-9d7e-ee6e35b96070", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "4d19c8c3-580c-4953-b49e-2800b3087cc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed322dce-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "b6ef4fa1-6c72-4bdc-b878-e238ab0561bb", "comment": "Malware payload (Mirai)", "value": "447250cf8f5a2530ab2591e983c0783e", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "285d607d-5752-4399-b025-0e87d3b38dd0", "comment": "Malware payload (Mirai)", "value": "fd780f0843744706100c92a4048002e784acbb16019a75d97732560a6773d189", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "b9b39332-c228-4c80-9cd6-d0a334ad93f3", "value": "T146230271880E8EF125703C76DA99D78376E11AB1C6673023CA2C0A3C6F756531E57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "44a4c3fe-61b9-4231-8cd4-58a7dbe34f2b", "value": "768:g/TYCoIxdEk+AxoTZAZHFeq8b3d89q3UELbUXfi6nVMQHI4vcGpvK:gECFd+A6YHAxdFLRQZK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "50acd67d-552a-42d1-9524-187339ff924d", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "76058594-1082-4f34-a1ef-60fbe9d92d5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed323d36-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "e6beb81e-8ecc-4068-ac1e-ab0501bb9100", "comment": "Malware payload (Mirai)", "value": "a707c2e2633e0a7e1802bc418d61cff7", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ab636483-c35f-4e52-9ec3-76848beff11a", "comment": "Malware payload (Mirai)", "value": "5366ef37d482d37f05ed7b3138b83579dd35c0a47e21bf5df63c9a7b24be40ac", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "54f6818f-e468-48c9-9563-4ac4ae3d3b87", "value": "T174B2D03C1B161B98DA1EC0BD839D0B203CB81F7494429D8B6206EDD3AF9B8747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "9f4862e3-8398-403d-a075-1976057ffa44", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuidlmdzJgGlzDpH7uNj1JA0:neD8ZSWvZHZbs1row697qohQvg9nizJ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "436a9c4c-e686-4fd0-ace0-9addffaaa073", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "6ba1de33-0755-45cf-8423-dc6279a86206", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed36c854-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "77c2b0e1-9fa7-4f3b-8621-9a02c87889e5", "comment": "Malware payload (Mirai)", "value": "472d4d75d8483fc824eb0911b4c35cad", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "0c2f7167-817f-4324-8e6d-30ce36e0d5bd", "comment": "Malware payload (Mirai)", "value": "c9d1873aac242b154ee98234fda07a10e4fcd3f91fe0f1c6a9d9eebdbfceddf9", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "72bca4a5-dc05-4edc-9e27-e4390e2de652", "value": "T188B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "a2544fea-8c64-4625-8f2f-f05a26ab29e9", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg10/LWy:c9sSyzz36YaWWgg10q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "3ed70a11-5cea-471d-94cc-2cd1f6c0b6c0", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "a1166c07-dbff-4b5c-8856-5d3f24ac4cac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3dc466-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "6dcae456-5207-4705-9702-2e03c02fa87e", "comment": "Malware payload (Mirai)", "value": "2324aaf02957b44bab1caa301721240a", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "d3da5dcd-6f5c-41bf-92d2-410e468c2864", "comment": "Malware payload (Mirai)", "value": "1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "3449e5b8-cefd-42a5-a8cd-d1691c5b189c", "value": "T166C2E0E07726ED31C520AC3EE52B4D8A3A91063C91FF393664158C359EC269B63F48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "1c020287-bbc9-475c-9e0b-1988adf75b54", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwrG9q3UELue:NKy4qfqoeJdXWgrLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "c0979cad-436c-485c-9648-07a7176b18cd", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "fdfc079d-9791-4d7f-97c3-945047d735b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed4effa1-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "b48583be-8fb5-49d8-81fc-9d0f69f29814", "comment": "Malware payload (Mirai)", "value": "22922b9a683f772ff4b0cac15fd9c4b7", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "e2f8d55b-63eb-4916-aa4f-e4057f5b52a4", "comment": "Malware payload (Mirai)", "value": "57eedd22106b0c148c6be833f6db510f1769338fb658407348ac067c4133514d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "77c17cb3-3382-4c8a-80b4-fbd3a07922b4", "value": "T135A2D12472A32D65E3E91C3DC96E836BB9670BFCD0F6337639445520C90D24A3E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "54dae9f8-536b-43c7-abfc-6c90e55774cd", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjsUmhymdGUop5hY:vvQn4j+ZO5fKAlxo5s3UozO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819724, "uuid": "a95f21a8-9a92-456b-bceb-56f266bbeb9f", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819724, "uuid": "128002d2-0fb9-4d4c-857c-4b2eb6e186f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed98076f-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819725, "uuid": "33dbd0ec-47aa-4adf-b9bb-8cc45eb18bf4", "comment": "Malware payload (Mirai)", "value": "fe554c823518892cc1b87337370a3211", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819725, "uuid": "4655214c-e5ae-48a4-bd02-36adf6f7fe6e", "comment": "Malware payload (Mirai)", "value": "d8f3b3cd5de4a9bfd20c3de51b11620399077c6b368e99229638f8c9f80bcf49", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819725, "uuid": "d6b88db0-ad89-4a7a-a461-3940215e864f", "value": "T1D6A2E0257F2DE98FCC37B278C6E5E4C693D07C24D3DCC9865781C11BAAA37846824E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819725, "uuid": "5214cfc5-9294-4eec-87ca-577cf231cae0", "value": "384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtYHSyI:O98o08kxofBE+ZkXaT47C2EpitYNI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819725, "uuid": "e9872da0-aec1-4e17-80d6-6e05f20d4cb3", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819725, "uuid": "fc8bf7e3-4ebc-4ca6-a5d1-215843619d5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee20f1fd-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819726, "uuid": "dd86e956-c534-4a54-a1b1-14cdc1c5f85d", "comment": "Malware payload (Mirai)", "value": "bdfb1cee9d19dd501ab22f7f463f8f39", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819726, "uuid": "daa4f14c-452c-48ab-8155-912474eb6ddf", "comment": "Malware payload (Mirai)", "value": "d04ff2c55347227527a46fea93e7262a6b0ff7ddd3b8bcc9678c1fc0a65e358a", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819726, "uuid": "3b805131-806a-48fa-81ba-7fa18959be38", "value": "T1F2432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819726, "uuid": "bd9511ca-e2eb-46fe-b3ad-57f9182ef1be", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwd:RqtmZPuutfbltZFBSJsBcfDSTFI+BEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819726, "uuid": "2f9792c1-d74b-448e-9352-f6db7c5b7276", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819726, "uuid": "c0eab6e4-b319-496f-99af-f10b26618be8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10c0394a-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "964ef81e-93b8-459e-86f3-d494b6c38422", "comment": "Malware payload (Mirai)", "value": "6ab90536ad4cc6d06cede414893b3764", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "8807daad-f64d-47e8-869f-8410659217a4", "comment": "Malware payload (Mirai)", "value": "961157f631f02a17ac5436bc474a482698441a07a4bc4e9ef5000ed21454cf53", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "2ff6ec73-15be-4a74-b66b-a54b300f2ebd", "value": "T1F0336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "528323c3-311b-47f7-a19a-951b2a171539", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819784, "uuid": "c81480e8-0688-4595-8604-df530cf187fb", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "70742629-2971-4831-a8fe-d8a055312f57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10c72dad-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "42045047-b438-4969-9dae-fcbfdede2be8", "comment": "Malware payload (Mirai)", "value": "6ec1473b27484c3e668224c0cb4c1e0e", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "9930df2c-137c-4b35-963b-5a5d33160a5e", "comment": "Malware payload (Mirai)", "value": "0f7eb45a71167d1881c4bf56673fb833a90e3345d7859a079f6bf586e93795d9", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "3ab361be-0ba2-4e18-b44a-e9a736f0b3a6", "value": "T1C2A2D025D3456EF5DFEF5DA492C1C3C2BAE547C6278AC8E240EEAF022516042F789D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "732ca2f6-c826-40ff-9527-46a179d3834e", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5Sod1M4uVcqgw05VxJ2:9RxsSVsMD6xiJJE5zRWNkka4uVcqgw0W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819784, "uuid": "075b363b-65ac-45e2-a213-46b79457d53a", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "8be0c3b0-92c5-4815-b8a4-e6a487082903", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10c987e8-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "cf93dfb0-77b3-4467-85c0-8ff186b110fc", "comment": "Malware payload (Mirai)", "value": "69668038676f0ecd567271d99dc5ef8a", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "3364484a-77ef-486b-9f28-b22d874e39a9", "comment": "Malware payload (Mirai)", "value": "222aca0c92c43f1ba63ffae2e9e0957e501506757e1e2c83c1cf44b349ca459c", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "b2695f2f-5f28-49ee-945f-80ad04915740", "value": "T1CA82CF30619B74E5DBF10431FAEECEC6971A0BF8D1FC36D326586B788A4110251F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "5860cb0b-5c4f-488a-bda5-df12295bb8f6", "value": "384:MjlzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaaEQ9hymdGUop5h5lt:6/V0P6+kom0tVAoNvm+to1p2s3Uoznlt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819784, "uuid": "91af0bcd-df98-4d96-8b8c-217866cbfa68", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "6bbb815b-16c9-4438-885b-14f5350e13e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10ccfb71-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "daa9f404-37da-45ab-9c00-a9615a142bca", "comment": "Malware payload (Mirai)", "value": "7f60eb1455dff80437e42c93e7247476", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "1aeccbf6-1bf8-46c2-896f-79f4c4e83281", "comment": "Malware payload (Mirai)", "value": "150a3de84d8410a60b2c6367f89e80dc37d4d3fbbafc4bb7c49755703e748de6", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "9c94a161-33f5-4d5b-989e-58a84b970dc4", "value": "T16BB2C0CC61543084C98D7C7C2B8D4A664FACA0C0BAED9F16E354CD9873BEA4B385D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "c75c2d39-16b0-49db-923c-48cbf7269749", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpJZqSWvT:4QlS07FUXqIYSXQKqufqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819784, "uuid": "90c62ebb-fcd4-414d-b24a-5434a276c633", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819784, "uuid": "01a24b6e-66ac-451e-9fdf-f315e92554f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "341924e6-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819843, "uuid": "50012464-7f99-4105-ba58-1d3a528fb000", "comment": "Malware payload (Mirai)", "value": "578b688950631d6b75f2b638322dd476", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819843, "uuid": "f1f70943-4b86-4fff-a3d0-5fba418e9728", "comment": "Malware payload (Mirai)", "value": "c7d86e3a2e878eaed3e454061418afd569ee71528488c590bde76e1632653a8b", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819843, "uuid": "f71a15c2-ec4b-4c51-a306-486ac00bc06f", "value": "T16B415BC5B3824432BFE25F97B1B4C448F090E0E76EC47A05D5ECB8E9854CF1835A2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819843, "uuid": "9c510a6d-4f22-458d-87c3-aa9fa4d13481", "value": "24:vWayOSWt0aIOSWsTTskaUoOSW2ZoOSW32OSWeTuOSWpOOSWn4OSWWKOSWIY4Ol:vmRDRJCRXoRpRqRrRxRsRVe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819843, "uuid": "77f99031-9086-435f-81e0-68d0715bd46d", "value": 1913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819843, "uuid": "37824755-5be9-4877-b831-f37a8149acc9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58808cd4-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737819904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819904, "uuid": "f90840b2-ec2f-44f2-b247-1931e9e61351", "comment": "Malware payload (Mirai)", "value": "8022100827e59b573d34ebdb1fb30765", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819904, "uuid": "0d5d42d2-939f-46f3-a9ae-314ed26c8025", "comment": "Malware payload (Mirai)", "value": "b0f79e236567a238b000d0f3fe5a24d17037a5078ac6a17570a47157f2d34e0b", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819904, "uuid": "84ba6d4b-34e7-4641-995f-7d99f95548c2", "value": "T13D432925AD792E26C0D8B57E11F78724F2E2620E25B8C65E3C721E4EEF04740A5537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819904, "uuid": "10926738-eda2-4407-b796-e2379ec87fcd", "value": "768:eLobAxU6q9Hfymp0xginuYvCkLB6WsTwIC1DQdszoDaS0O+DCD0:eL0AxvSHfymp0xgunvCkV6vTMDauj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819904, "uuid": "65b09682-f7de-4697-8896-6b9a14c60f82", "value": 60412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819904, "uuid": "0c1fbeec-eb47-4d7c-9bf4-ef272d1e2a87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fdc1c52-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737819943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819943, "uuid": "fd789733-5431-4b23-b786-d81bdcc072e9", "comment": "Malware payload (Healer)", "value": "c43465bdafef9bcd7544afbe1dbbefa4", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819943, "uuid": "e56e443e-beb7-4b23-8737-529ec934818a", "comment": "Malware payload (Healer)", "value": "114c0e6cf7fe807f8a5c5fe70592fadca2369f771ecf3defa16787176289e493", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819943, "uuid": "52631d2f-eba4-46b2-92fb-4659be25c795", "value": "T128D529B2B845B2CFD48E13789527CE82591D43F94B2448C3A96DF4BABE63CC116B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819943, "uuid": "b6bbda3b-bc49-4193-9cc5-2ffe4d5d15e8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819943, "uuid": "de8cf0a3-eac3-48e8-b39a-3c14aa654fdf", "value": "24576:dEMIOx8y4U/Xh+mRvXk4vJCYp22+uyf9gkCua2PWeJQ8qFdhrNXTwT4kDg7fekdO:b8y4U/X9XU8eY9wTWzdZ0b0an0w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819943, "uuid": "dbfcded0-7b7e-497a-b940-b798867ad361", "value": 2776576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819943, "uuid": "f385a778-101a-4ad7-ae58-917be5f4d892", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7590acfa-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737819953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819953, "uuid": "b0f465f5-cc50-4541-96ca-1a5b3bc16624", "comment": "Malware payload", "value": "cff1af75953aae08f3d85ccb35f5b328", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819953, "uuid": "cdc84545-5753-46df-8d35-51d956cf69d0", "comment": "Malware payload", "value": "43e20f2e38f65ac349f9b4663151b1d2eada78e075fea2df3ef5a890b9338305", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819953, "uuid": "6b8c000e-7a6e-42ea-818a-b731a9e12220", "value": "T16647DB8C0EB64EF8F265E01723616BA6E449241FEF453BDCF64D71AC9F04085FA9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819953, "uuid": "48a1da24-29b3-485c-bb85-8a1f0d3b4c3d", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrE:Nu/MEdS9plw4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737819953, "uuid": "b642df88-0c09-4bab-ab36-902494e9fed6", "value": 25982878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819953, "uuid": "af23125f-88fa-4447-b55a-8b2ede1dfe34", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dcc234e-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Worm.Ramnit)", "timestamp": 1737820262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820262, "uuid": "6421a38f-66a3-44bc-a448-abd8d8fc0326", "comment": "Malware payload (Worm.Ramnit)", "value": "ed1c72f364c8c8a799d28853aa39ecd4", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820262, "uuid": "26362e53-5ec3-4782-9aa9-99ef472f7ccf", "comment": "Malware payload (Worm.Ramnit)", "value": "4c175312dc3c513bc06b9c254b7036547809b68ad3f8b27d2afc8cf0769ebc28", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820262, "uuid": "88445b3f-b5d3-4ced-ae9e-dc01beb458f9", "value": "T19CF4234819E6674FEFF1B234580A79C146FFBB87DAC8036C86F873579DA12451622B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820262, "uuid": "731516a1-9d63-43e5-b238-2889c88c969f", "value": "987b6ca9dd5f926a72ce3178ed8a981d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820262, "uuid": "b63188ea-7351-4fbd-91e4-23ada859d32d", "value": "12288:Vk9KBBXcdKQOwyNwCYo+sRgFIfgHOJUeamcAwwoqWV9eYBKSytK3IS4RsPynvP2Z:7BJ3jwCY7sCXOSpA0q2eYBKSjV4v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820262, "uuid": "fa0f9b30-334f-49e5-b1a3-098bdc311269", "value": 731136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820262, "uuid": "fe20b623-bba0-4101-9561-3aee05492981", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a112232-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "5aced650-f9f9-4e09-afaa-91348cadd645", "comment": "Malware payload (Mirai)", "value": "4fbd38fe6fe037b5a92fe0837044c2a8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "a8f00776-51da-48ed-87b4-04de8b3de1da", "comment": "Malware payload (Mirai)", "value": "d1d9abc845050d4e239f0faa4cc65786b6d0e178fa290bdf27d1ff7a932e83ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "7615c131-8896-4e12-9015-c167ee56b44b", "value": "T1D082D030619F75F8DBE10434EAADCEC6971A0BF9D0FC36D216586F7C894140611F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "964f5a14-09e8-42f4-978a-8498a6387126", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaPC5hymdGUop5h5lY:6GV0P6+kom0tVAoNvm+to1PWs3UoznlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820444, "uuid": "f7063b7e-a5f4-4484-bdcb-7d6fef08f96a", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "088222c6-fb5f-4b12-bbfe-689d5c0de1be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a16eb65-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "5b23bf18-cb6f-4a73-94e9-80603d7e6daf", "comment": "Malware payload (Mirai)", "value": "04bf541d21bdbeac6834f191bbef9e94", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "e2998c12-1af9-4fd4-a4dd-11f0009a9c2e", "comment": "Malware payload (Mirai)", "value": "2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "bd631214-1c21-4c8a-8418-394b99bfdaa3", "value": "T14DC2D0E0B726FA31C4206C3DE52A4D8A7A51167C91FE393664258C358FC165B63F88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "7bec8882-ffc6-41b6-be37-2741d89105b0", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwrgv9q3UELu/:NKy4qfqoeJdXWgrLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820444, "uuid": "fc5e7d1a-7264-49e1-8ed7-3de661faeeaf", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "84f19d13-415d-4d5e-a857-a2b4f8284248", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a171aef-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "01eecc37-0593-4989-8163-d813a16b07bd", "comment": "Malware payload (Mirai)", "value": "73634d3844e42f2eedb19bd648dbe146", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "f5af35e8-0474-4db7-8961-0403e6057c63", "comment": "Malware payload (Mirai)", "value": "0d88f64514e9d6c207227327dcae2a6a98fe86eb3f81db8f65249504269d3fbb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "e8a53765-6683-497e-89da-1a2b0d55a9b1", "value": "T1D5A2D025E3456EF5DBAF9CA053C1C2C276E587C7278AC8F240EEAF012606056BB89D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "51c5fd00-cce1-4db9-a709-76d82867d87e", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5af8/M4uVcqgw05VxJT4:mRxsSVsMD6xiJJE5zRWNQ4uVcqgw092", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820444, "uuid": "8979205d-8964-4eac-99d2-b02a688b11a7", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "590a9bab-cfaf-481c-9cb7-4aa2cdc80313", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a1735d0-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "37417064-280f-4730-bd46-d4c7d03f76ba", "comment": "Malware payload (Mirai)", "value": "a3150482007ef3f4948803962aaeae5c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "b775c9f8-5ed5-4f3f-a7d3-5150e30cfb2f", "comment": "Malware payload (Mirai)", "value": "697730bed4e894e2e9d7264e5194517534b0c2b0c028f83cd36afecf55707336", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "d7dc0a3b-8990-4cca-a75d-5fe93842c39c", "value": "T1FAB2C0CC61543088C98D7C7C178D4A674F6CA1D0BAEDCB16E350CD98B7BDA8B38590", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "9326cb13-576d-4ff7-ae21-bd48c32f0a8c", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpMZqEWv/:/QlS07FUXqIYSXQKqu0q9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820444, "uuid": "4b7cf872-80e2-4985-9d87-e69674ba28f3", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "82f5a417-f9c5-498c-8564-e8a9606cc86c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a4e7cbb-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "743371a2-0141-46e9-9f1f-5768fb5e6cba", "comment": "Malware payload (Mirai)", "value": "f469673e4edf883fdc98a0828da425b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "610eeec2-429a-412e-9620-b4bf810e5a5e", "comment": "Malware payload (Mirai)", "value": "de19c107493dd5c1ed1605624b3bddf48c22fafe828ff3ab46ab1ad1e98b6e06", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "f92c78e0-2ab2-40b8-bc06-90cb61430a80", "value": "T1DCA2D11172A32D66F39C1C3DC9AE8357B9A71BFC80B6327669441624C90D24A3E39F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "38a3294a-bfb3-44be-8741-d6eef8dc9a22", "value": "384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjELXkhymdGUop5hu:UvQn4j+ZO5fKAlxALXks3Uozw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820444, "uuid": "c5aec5f1-2de8-4919-b55e-f954fe9e034c", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820444, "uuid": "f7507874-dc38-4c76-9cf4-2247d8fa0f98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ad3353f-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820445, "uuid": "e0c876e6-3317-40bd-b691-abee6d37cf2d", "comment": "Malware payload (Mirai)", "value": "0a7877fdc4500098ddac8e6081ba8fe1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820445, "uuid": "e5fe6974-8223-44b2-8fea-1a191064ecdf", "comment": "Malware payload (Mirai)", "value": "17cd1a371051508c082dbbf1e23d04ebcc48f290e3b2c284c1db6bc45e1ba2d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820445, "uuid": "2a75b2dd-6351-4f4e-93b7-4ddb6fd94758", "value": "T118230271480F9EB164303C76EBD5A783B6E11AB6C6673023D6180A3C2FB97531E17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820445, "uuid": "8b06fa7d-a3b0-474f-9888-58f74f9eef06", "value": "768:5/TYCoIxdEk+AxoTZAZHFeq8b379q3UELbUXfi6nVMQHI4vcGpvB:5ECFd+A6YHAxaLRQZB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820445, "uuid": "61d32af1-a45c-4383-8d3c-28adc742a9ed", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820445, "uuid": "300d7533-0f9c-481f-88af-1cd5213f653e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdd6d731-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "724bbf66-f45c-4e1f-adda-a3753be9bbcc", "comment": "Malware payload (Mirai)", "value": "5035d39e164982ec9c3be3d637576e20", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "722e1a41-b544-4dcf-bd52-a9d27ec04285", "comment": "Malware payload (Mirai)", "value": "5db0ff8a4a23f7ddf655588c421320b206078e7415c7b6f1790addd436643072", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "f4769a3c-264e-4b60-913e-65048b334d82", "value": "T15F330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "44e4155f-cca6-454f-838e-283c46f4bf0d", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oG+:r/hqaJMcjeqK806MHdMfQXoHuC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "35afbced-c7ee-423b-ba72-ff73f83d6d50", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "8f82ffdd-39b2-4484-a2fe-b1b620d0abdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddcdc0f-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "e6464df6-2a75-4543-af10-60aaa68cdf9a", "comment": "Malware payload (Mirai)", "value": "2286392807233007429f8bbf1132c145", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "c38c36c3-f391-435f-acd1-e86df897db46", "comment": "Malware payload (Mirai)", "value": "1ee68c0f5d023a349094fc4aac6ddd1615171dc19f18441eb2f7e6f5450de443", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "a91867ab-c8d3-47e5-8201-dcf7ac41fc5a", "value": "T175B2D03C1B151B98DE0EC0BD839C1B5138B41F26A142AD4B7217EDD7AF9A8B47453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "d43b51a7-5e28-4912-981d-35264b5b86e9", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiwimdzJgGlzDpH7uNj1JAF:neD8ZSWvZHZbs1row697qohQvg9wiizh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "3c7fc96e-64fe-4deb-9ae9-3e08754cd1bd", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "347fee02-3034-4a0c-9ec4-aa080a398e2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddffc26-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "6e40dbd2-e110-40aa-88a8-10a4f50fd26f", "comment": "Malware payload (Mirai)", "value": "e2deea731004d9873a37f49a9a65d036", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "92e8ac95-01f0-4988-8864-6e38f39ef9f3", "comment": "Malware payload (Mirai)", "value": "4837e874535cfb346bf3e44a97d1614b9838061b4b8da62b4e55367a75e01e9f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "0f175569-f283-48d3-bf92-4227853b6a01", "value": "T1FAA2E155BF1886CBCC32693445EAE9D21252FC71F2EDCD492640C16FB0A33996474F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "3a62a16c-c87d-4457-8507-75facc8774e0", "value": "384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKy:O98o08kxofBE+ZkXaqGbp2F2TWul0c5j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "de3b2eef-8229-4596-801c-7cb7845a2cc3", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "c733386f-e560-4208-984c-557552c1d660", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bde17bb2-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "82ba457b-d0fe-4f8e-88a1-47a00a256c9d", "comment": "Malware payload (Mirai)", "value": "5108c10d6f9676ea62ce7a4d73c18ff9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "9881baec-717e-4b14-a19a-57202cfd7ad4", "comment": "Malware payload (Mirai)", "value": "53082d85bdc1a099845224d24b860fc78c18503340d3bf5289e4ba8cfd13306d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "d3af9788-71ea-4620-8696-6a18c81694b7", "value": "T1ED432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "e2fd4532-b703-4388-892b-05ab9fa843a6", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwa:RqtmZPuutfbltZFBSJsBcfDSTFI+BEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "757d8651-6381-4431-984d-fcae3bfced20", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "9b7855cd-b972-440d-a911-df72b191d733", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bde7bbaf-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "02dc8b87-c10b-415f-b443-7d4c9d4ae962", "comment": "Malware payload (Mirai)", "value": "475a1a169e3224b6112a5923c954d95b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "6d6cbad6-6985-4119-8652-f9a39246e1c5", "comment": "Malware payload (Mirai)", "value": "311842afb066dbbfe7ab677c17b30b74764cc99bbb219b247b5a0140c33611a6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "ddba5d13-e71b-4d07-84ab-340182dbbc8b", "value": "T10AB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "e30afd94-caee-4850-a6b2-f58ff8c1c4c6", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1F/LWy:c9sSyzz36YaWWgg1Fq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "d11ac235-91ae-4ca9-a5ca-ef58abc8df63", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "71710b36-39c1-4be9-9820-cc3d14f5538a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdececcb-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "a1f25e80-13f1-4c3b-8057-f0d66b81f3f4", "comment": "Malware payload (Mirai)", "value": "79b8ac1aa9979b7da065f85677ae9f5f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "efe25cbe-e8fe-494e-8fdd-a13cb90bd5ef", "comment": "Malware payload (Mirai)", "value": "05cb193dde5a3b4b2bc623d5282f58b71b7ec312e0c9071480878a10b2983981", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "5845a606-0dfd-4b76-a1d5-707e8b0e6d41", "value": "T164336B36E029DED0C6560234A4E88F751F03F1C893536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "4a8142fe-88bd-4ad8-83b3-e3a5ec4abddb", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820504, "uuid": "4622ece9-2813-4a72-b6a9-eb76e672fd1c", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820504, "uuid": "1a1a18d4-00d4-4934-aed1-50be8f174db2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05610147-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "a46689f8-3237-4fda-8cc2-6dae7d3f712d", "comment": "Malware payload (Mirai)", "value": "1e2ec8bc23e3a1e04b8b45a17754971c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "8827032f-89ce-4e6d-9fa1-52c6dfbd0a79", "comment": "Malware payload (Mirai)", "value": "ab89cfd194a6085a0c71b54451379d8e8ba343b2e9301fcaec0a965deb462fa3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "1f85af41-8d7f-4f24-beca-41a6b475d10c", "value": "T132635B42730C0647D5A34DB43A3F57E183BA6AA120E8F789251EDF499BB1E329146F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "0c60f3a4-e795-4c11-b983-dbfc69c0f127", "value": "1536:W7Cm0X3cQPcAE99E9fTPFzWmCQSfIKRU4PrOLKbQ:/+9WfBfSfI8PrFbQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820624, "uuid": "6bec6c51-3917-4d8d-bea0-a407f34663f3", "value": 67052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "7e7b76e8-3536-48c7-9859-c04200b10768", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "057a2195-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "a645b8cc-8f70-4738-a5d3-c764951bbd10", "comment": "Malware payload (Mirai)", "value": "57c6a81552fd5814a8fe7136efad5f5b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "48678222-245c-42a5-82bf-49b8b278e8d2", "comment": "Malware payload (Mirai)", "value": "2285f00ce989c8dcf536d07a36654da3fbd0ce9d0dd1051bf56bfd39387fccfb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "06774163-1ab3-4b94-a3a2-f3271ce5a02d", "value": "T1F7634A07B98180FDC49AC270076AB63AD53275BE127DF3BA77D8FB226D45E221E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "7a1f46d2-2518-4475-bd2b-735a3d613e94", "value": "1536:sfhZFJQGZVT2JfCzMsY6lXvc/KM/w1BW0fWFKBf:WZFSYVTnzMsX+KMYxfWMBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820624, "uuid": "b974571c-bc8c-4c86-b834-5552fb2b3247", "value": 67536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "686dbe19-43a0-4caf-84cc-84e2f91b95c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "057dc04a-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "dfef8ebc-df49-43bb-b506-c61e7d569b42", "comment": "Malware payload (Mirai)", "value": "c8c7a9a373da77c3272998ed6a6a5834", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "58735b3d-7270-4b03-b382-30b77fb3bd05", "comment": "Malware payload (Mirai)", "value": "e426df3f12a3c11e3614369820be37024384905c28dca1bc45023c6914846942", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "0c3db862-3733-4424-867b-f1b19b85c38b", "value": "T120531881F54B84F5E8074970806BF33FDB31D9294161CAAEDF9AEE36EF2764192162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "2b94ea49-4a6a-4ee4-95bc-52cdd1bc50ee", "value": "1536:bdbx4I4zrNtWyZ0h6Vw/4uoWuI3CWMLYlGbTsT1xx+:bdbxL4zxtWyZ0h6Vk4OrSWMLeGkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820624, "uuid": "fe82ec6d-e96c-456f-a2f1-073fb8864fbb", "value": 62644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "275af327-94d3-4dbb-ab7d-1659611a6de8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05806d78-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "b558df37-be05-4415-927f-e4a8c3c0b09f", "comment": "Malware payload (Mirai)", "value": "3cf0d0e53acb9ad590a3da94baef0cc7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "35cbf8aa-2894-4b59-8da1-6bec2900b483", "comment": "Malware payload (Mirai)", "value": "34e92d3291cee4183eb447327005b8cc6c071cf52151cf305c5b98ead21312e4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "f66a4b3a-de5b-43a1-98fd-46aa1092d875", "value": "T100534A89F783D4F0D84309B0116BF73A9775A9350120ED6FEBD8FE23AD72A5294562", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "4eab6f9d-d6c9-40c0-b449-b6f393b91a1e", "value": "1536:aeipylbVtmWsxDf4yfknyqOl0MonK6tOSuiBXXIUB31ApORr:aeipylbVtmWsxRMnrOGhKEOViB9qwF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820624, "uuid": "4b6b62b5-b853-490a-95a3-3846534d1aed", "value": 66420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820624, "uuid": "dce95527-7674-461a-9219-4e60711510ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29dce4d5-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737820685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820685, "uuid": "b9599149-fa97-4148-87a8-a17b4c3d310a", "comment": "Malware payload", "value": "48fc1af1f87da04d7a0d799a6274d664", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820685, "uuid": "d3f94b33-c0a6-474a-98bf-c584a2d5ccaa", "comment": "Malware payload", "value": "152ab0f048754766443745e33cfb8b1de89400ef4a7c23cda3563327eefce440", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820685, "uuid": "1d1a8cdb-6465-4cac-988e-22f13333502a", "value": "T19F3316740549F62CE9F51078F44720F92992061C3BDCE2D360E3467AEFB4B48B9A6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820685, "uuid": "d684413d-cf9d-4cd8-89b9-74a135c912e2", "value": "768:ZxTHUE0+ki3JT/j6EKr86n9+jH1NojfZJky:ZS+kkM921/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820685, "uuid": "af05b266-8cb3-4e49-9f2d-cba037d7ef12", "value": 50796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820685, "uuid": "bf16b4a0-d207-4528-bb26-755e773da23b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a536956a-d6c4-11ef-8278-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737820744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "989f9ba0-a604-463a-a075-8b764a4a3194", "comment": "Malware payload (Mirai)", "value": "161de9eb3e9fb9e99566a3be6f21326b", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "7e1d7618-882d-4ee4-afab-caf912499924", "comment": "Malware payload (Mirai)", "value": "2fbf8283d6a969b76b5669c264b68b6c430efaaa5bdb6c818dc6ab2f1c21641e", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820744, "uuid": "f0be5715-6d61-4036-b382-8d41053df053", "value": "T125132A51BDC0A756C0E016BBFA0E8189336A53FDE2EFB6034E526F2133976260EE51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820744, "uuid": "2f89d257-0836-49fc-88af-6eb0d795bd63", "value": "768:QUA6rQe1nAxqDJquvmJ+v0CNmE6kXIxhRzlVm6BH2AHcoV4w3mlcShLAvVbsjadl:rbvVvwE0VmfoIsvr0moIy6Zs5VVAnnFR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737820744, "uuid": "ed3ecfd3-db95-4d4b-9dc0-15ff76c5796a", "value": 42304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820744, "uuid": "d64b9b11-e30a-4d63-834e-a0cad019b028", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5ad1c5c-db36-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737821349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821349, "uuid": "35b2b28d-af7b-459e-8b57-d0ec32abc30c", "comment": "Malware payload (Xorbot)", "value": "7b787a4695769b0853703cd1452d88b6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821349, "uuid": "6bcf0437-cf96-423b-bdc4-81f2bdcb3cfd", "comment": "Malware payload (Xorbot)", "value": "79e9f4bcf8ee2033922d7aea56ffea0e730b72e450e2fe2ab6398ac3379bb1cf", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821349, "uuid": "f5294092-cf8c-4801-945c-d4912fda1527", "value": "T13E22F1C542E02E33054F4D2E5AB67C54214780C1EACF3BE8D89A9EA5598CF4DFF09E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821349, "uuid": "f3a242bf-c919-44ba-be65-212dcf3a5aa1", "value": "96:egQsy8xLvL/FvUs4E3nMuDb3uaZsrHrWOKO8hXvL/9vxoJs4E3npS2hDb3ua+LoN:egQsykLhvUs4E3nMyPGs4E3nc/gQsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737821349, "uuid": "77b87ea4-069e-4810-a382-cf12e868a754", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821349, "uuid": "3357a317-aee3-4484-a0d6-2e4878119b4f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e57d13d-db38-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737821927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821927, "uuid": "37a1f465-9eb0-4f65-b7d7-cb0efb4926f7", "comment": "Malware payload (Amadey)", "value": "5b255759eb7f38d7d89f1ef670509339", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821927, "uuid": "1aa5c276-71c3-4744-b621-645cae849531", "comment": "Malware payload (Amadey)", "value": "c04478baef60f5a6860b939b5a15c5306495b06a302f694ce3da8aeb973a16b8", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821927, "uuid": "ab7d071b-52de-4496-9ee9-c4658c2e250e", "value": "T16495335AF8F2D898C53A5875867E64A5A3E4ACCD40DF635B6C35803F9A0336CB0D09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821927, "uuid": "c765d39b-3cc3-4ef0-986c-fae4c745d311", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821927, "uuid": "8933457a-131b-43ef-928c-bd42ac0906f7", "value": "24576:d8kPypbTIRymmqa6ZB1DEAbRptcwubWUob7izM14o4xsNaIX9SzUySeSdDUeCnf0:yMKbTIRBmcLFdbDtZ4TWjGULUeykT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737821927, "uuid": "008f1087-9211-4426-a9f4-85669e61d5b8", "value": 1907200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821927, "uuid": "7a93e395-c7a7-4a03-a32e-887ea974c55c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29aa10db-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822063, "uuid": "f9afa3e0-5fc6-41e4-be8b-5e6ce180c68a", "comment": "Malware payload", "value": "95706d3c060e268d9ca433c37716b7ef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822063, "uuid": "9fe89a3c-ace8-477a-b87d-4c9cdd2fd3dc", "comment": "Malware payload", "value": "36c7192d61362039f598b93052c6b08da3c2806fe7f9ce9a1e61fdb14c95c7c9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "eac84138-b7f2-4d02-a5a2-3c723e804fe2", "value": "T1B1030A92BC928D67C2E013BAAB6E528D336277ECC1DE7653DC111B10778A51F0E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "870a6433-b5f2-4c23-99a4-63d1e4a40888", "value": "768:IVHSWhsC+HRgdafcfl3dxrceCMy1KfYgpxMCBg/NG:Ih8ReaudGeCMoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822063, "uuid": "3b2943aa-bb96-4099-b652-fc0b2d39d1e9", "value": 39900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "75b6a5ce-66dc-44bd-a203-8e2c059ba259", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "c680d9bc-8425-4fee-a983-670892fe81d0", "value": "t12fe06800fd65c61898cb6a70eecd47b49401231221678b148f54d6e0883f014a709e", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba3b00f-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822063, "uuid": "12fb7842-b4b1-4caa-b37f-778fc8168b95", "comment": "Malware payload", "value": "f314c4789d08e22f82ccce70bdf649b8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822063, "uuid": "dba0ce5b-d93c-4433-8cec-607dbe25715e", "comment": "Malware payload", "value": "60ccc1960f28cd5e89c5cd85c44c6a48b9fa83f3f176e3d39a3a0cfb45dd400d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "25c46751-42eb-43a7-824f-5edd1ff01cdd", "value": "T143E34B46EA808B13C4D61776BADF42463323AB5493DB73069918BFB43F8779E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "eea2bee8-ec77-449e-bb23-976ab87e478d", "value": "3072:iNS8nVvTMbvYva5M5ZcPTnfhLsogQOuLF8M/9JmbXQE:iA8nZTMbwva5M5ZcPDflDOuLuM/9gsE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822063, "uuid": "5a88517a-868e-42be-b18f-198fdfd8da26", "value": 146173, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "2a040875-db2b-44e2-898d-e27ff82dc126", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822063, "uuid": "5f161982-cb7d-4cff-bf5b-0291b83b2417", "value": "t1b931bb31572051155aa2ec60dded97a21529a7173744ab33ee3684cc241a0aaea36c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bc1b9ec-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "77400be4-03af-4567-ae7f-9b5ceffd9789", "comment": "Malware payload", "value": "06e3ae9bd59b025cb7181795f58aae35", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "5232de77-80ff-438c-91ce-775880865525", "comment": "Malware payload", "value": "351977f033a333c54b7ec6f1ce1effa9619f3840a0326167c89350a4643912e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "7b6e28ed-42c8-4a2d-a52c-36a70a73c305", "value": "T1CE3339C4E64BE8F5FC56067421B7E3728A73F93A0029D997C369A432AC52A05E6573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "c8c8a7c6-8633-4d0b-bbe9-4b463a358ba6", "value": "1536:koFZyQDHb4T1WhmlDnEwLw5rL23W5B4OJBjb7Sx:DyQD74T1W6IwLE/p5B9J1b+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822186, "uuid": "640217f3-0088-4fb4-b506-397608ea5c7a", "value": 54352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "68dde926-8213-44c0-8624-54a7143ace39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "2f38b95e-c305-4cfa-8a3f-eddb501ef055", "value": "t14921e4b72e760cedb3c0a84cc31a52d31536d27b5ab071b901726c9133f2da180b9c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18dcd500-769a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "5e66b244-c604-4a4b-baf2-6343f760134d", "comment": "Malware payload", "value": "3fedd9081207acc8f73e7627feabcd17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "db813320-1f22-4488-9821-08f730886cc1", "comment": "Malware payload", "value": "8ab291b8b90c852ef6d5eaa9d0372da2e232193f4c3c33ecfeb93b2df5680584", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "1780d500-ce0b-4d21-82d4-f5cc09ba02e6", "value": "T1C2A16A893F916F330D91DF15F227862DA5A298C124D14F96B4EDB0BEB8BFD08B111A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "8ed7a8ff-eec8-4813-a7f3-3985d76ab782", "value": "48:1tLzBLfsLDJdLNGL/YqL2DLNBvsV53NLSHJhh0jYgSHhg8ZJcHYKa6JcewXzGzDo:1xR2DziAcMNC5d+HricgkhL9d6ZGTFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822186, "uuid": "2e262049-da22-44ff-a9bf-a34747e36842", "value": 4708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "af65499b-5891-45b6-9852-3a5de63fcb23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18c93342-769a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "d3b7e7f9-bed8-425f-9c44-cf577d6bcfbe", "comment": "Malware payload", "value": "0cbd1cb194f286c24d3ccbbd2800d575", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "35061782-5217-4d81-bfa9-32116f06a240", "comment": "Malware payload", "value": "5800208678d4341edcd46f99f4e769dbd61260bccc25e0eea46aae377bab6f63", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "f123668d-9b51-4791-9bbc-985b8255a31c", "value": "T13BB1788A7FA16F720DA4DF01F226851DB59285C614D24F5774FDB0BEADBFC08B101A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "0a5e4da2-7454-413f-9e7b-ae55beecf3a7", "value": "96:Qu6dbUoJDWF5cfNd1gdH6xFgzhjuW2VS6n:s3Pd1gdH6xizhjz2VS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822186, "uuid": "94792e11-d4cb-43d1-93ee-4677aa610cfc", "value": 5262, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "013fe996-ff9f-4071-b1a2-24ba8c771a71", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f08ef97-6fa5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "c947df94-4852-4394-9776-18d2e0422bca", "comment": "Malware payload", "value": "7c3eda7443b196e8ae5c49b3796dc669", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "b660cd2e-50eb-4543-8f42-66ceaade5706", "comment": "Malware payload", "value": "91e1818e2006e088de568f234ab96f567212db008bed319ff77c279a52e40623", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "0f6fb7aa-680f-413e-8463-40ca222919ae", "value": "T19BA11C9A3A604FB20F16EF2DF32581957142A2C24C53CF5424AD30FEB9BFE8859D09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "7eac5067-dbfa-4c2a-aef6-a7a5238de411", "value": "96:1xe1uzFjcLc15G5ar53g/IAzLDWbmkTFv:/r15G5ar5w/IA/DWbmkTFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822186, "uuid": "b32479fe-e11c-4c70-94fc-c24517789038", "value": 4806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "f768f1ed-bfc6-44c8-ae34-6cf860306474", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443c883a-769f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "d56a9100-06fd-4244-9227-c06568e6689e", "comment": "Malware payload", "value": "c9f4c027d69942e18bad05608925360c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "b8ed6392-6c21-4a52-87ba-40997337f087", "comment": "Malware payload", "value": "18f409cf48fde463d8de14431e4be423c71dccddd49a2c5a9d0cb77b32efe3e3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "0d5fd4e8-8934-4610-a0d4-93955e78f7f1", "value": "T138A176CD3BA126335E50DD52FA1381AF25A2E0C025D14FE6B4C8B0B678ABDC0F6C1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "d802cf20-290f-463b-a389-775dd5db4186", "value": "48:1tLABL0QLCBdLQGLUgqLXTLgH65QwIcNYO+Bh80wggLXswMjcBJ8gDj62VXom0JP:1x+ZCbJzcHgRwIGV+jlngDswhvHjUtx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822186, "uuid": "6527acc2-3a6c-409e-9c23-3983a2c3c7d9", "value": 4709, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822186, "uuid": "52d75a29-fba2-4dab-ae98-4641bec7068d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29efafc6-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "12b6e689-fcd1-45aa-9a77-90559d36121d", "comment": "Malware payload", "value": "f56ba281f91d4d31de3af57e72dee818", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "71148915-c588-44f3-9323-37a7c5534f6c", "comment": "Malware payload", "value": "b561e39594ff47df3eeac90d75996213255090763d1cde1a1eace6c945659981", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "8f5aed98-6ed3-4fb8-8371-b1f451b5fc37", "value": "T14F439E3BC42A2E58E19482F5B8658F791B53F94482476FFE16A6C1328047EACF7493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "edd2c4b5-0389-47e8-af7a-aab4e6c58eec", "value": "768:CBg4h+aWmD/HiehHqU2jLBc6iM4SrC5PL8bdKLehPgaYopNv+okCxKlFkfbGXKI:CBfh+3x1LjG27KihPb3fPkCxvGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "7e73c47c-3d54-4d03-a19f-000a39aab061", "value": 55472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "56886a5e-fbd7-4a9a-97fd-9d87db334260", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac054e98-6f88-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "0c1429d8-037f-47b3-8e4c-5004dbab394c", "comment": "Malware payload", "value": "048af0f33f1d94915d634b19bd159964", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "2300319f-2078-4ea6-862d-381dbd7becbe", "comment": "Malware payload", "value": "80db654728e36088c332abd739fbb66410f8e49a55bdd360c041bf94b8d842d7", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "f1c11403-600d-439d-ac82-d2cae637d126", "value": "T1B3532980BC819A13C6D052B7FB5E428D732717A8D2EE73139D266F11378B92F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "eda2abae-9e5d-4c99-9d36-b04d29c88c41", "value": "768:rdmLofzkz4IikDXNvCjCcetSuoTwA0RECJz/NRGbkXHvuMV/A8KqT1L91SVLEvaA:gLQc4IZDQetkwFKSX5Qqd9oZEvat1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "b7d5a0a1-4aa9-48f7-91fa-e0f985c62473", "value": 64080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "2eab4670-3572-4a10-9efc-e90a0ae51f40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "099c1e0a-76d3-47e4-9a54-de86441bedd4", "value": "t1df01ab2444c409cc63e081a6c0cf227702ac347e1a1525ad63a2fe0f81a7971b5348", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29daeba4-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "9e378661-e4ed-453e-b50d-7e5a0c5524d8", "comment": "Malware payload", "value": "e5563fd4b500fd68c0242bf3bb2256de", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "71c09bf3-ad8a-4fdd-8afa-55151b35b996", "comment": "Malware payload", "value": "a91ed4297192242434f2a5a38d4eb00d3c5a9e2c09a92a511b1d06a2dbbef1d2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "6ffddf34-f859-4d82-8c92-5d41d3e039b5", "value": "T151634A22A9761D27C0E0F97A31F74324B2F2579D25E8CA1D3D710E4EAF61B4022876", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "7c9f280f-57f6-4983-8eae-cbb97e4b58c2", "value": "1536:8pTdyuj+iSmcgPc8fZebdwVu1qQ75FtL/t:8H+LGZuHqQVf/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "43ee0d83-8bad-48bd-afa2-aa88f57fd209", "value": 66880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "be0b9875-6548-492c-959e-bbaa0a24e0a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c31888e-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "8f036ff8-3e05-4d93-9fa2-0723040ffad5", "comment": "Malware payload", "value": "d1912ba2b74c567e198dad1c714076bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "cb87685a-9549-4b1f-9773-25ff4d9ba368", "comment": "Malware payload", "value": "e1ce2334b03c33909a768ed3e6ce2133d09ee9e5252bbf78e0240452d5b94ba3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "635b326f-e7c7-4fc4-93b1-f68b7caa1eeb", "value": "T14D436BC5AA43D4F5ED5611706533F333AAB3E57D1228E993D7A99032EC92A50E2273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "a84b234e-36df-46d4-96a8-56e4241459ea", "value": "1536:iasMTy8I1jYHtwAAefPDbTk4FuKbxVderirpYpABSZz:iAy8I1sHtSe3Db44FpbHGioAw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "a91ec5ca-08d1-4577-b94d-c335dcc074e0", "value": 58448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "4ebab162-ace3-4396-95d1-9bf68ebeeae5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "f60dd2aa-ea07-449f-9f88-6a03f8fed291", "value": "t18e21d1ba2eb659f8b3d8ad48c31ea7d35a3ae937252070b044726cd123e2c414036c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a0cf526-7699-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "084fef1b-0325-4505-bfab-fa30c3464ac9", "comment": "Malware payload", "value": "f7645a38ffbf63bce7429580b1aea9aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "dc37d5bc-f81a-4e02-9196-a834c1975845", "comment": "Malware payload", "value": "6057190ea3e2531ad5d67e762e53e0ed314a4df35c21fe76d580ba3a6be3e313", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "d0ef47ab-5d2c-48a4-abc3-efb7fe7809eb", "value": "T115533A17B540C0FCC59DC174572AB63AF673757D0238B3AA3798EB126E4AE614E2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "8092dcd1-b986-4838-bd9b-9f4938b4e4f4", "value": "1536:KzGIfL8YS4+Q41druM/iIAyUvuxM3s+PQBuh8Qw6:iGID8XBQ41cQQyUEv+PVh8Qw6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "58326c2c-2890-4417-808a-70f8d175c382", "value": 63264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "3aac5a2f-8469-4801-a95d-71a1dafe4b2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "a5c048e3-04cf-4820-9cc3-eff2adab22c4", "value": "t1cc21272236aa05a4f0eff5527301e0645e721aa000f279f3e2b1b8fad7527430a75d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "887a861e-7699-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "97e5792d-ad6d-4e86-b64d-4a2a3ca808d1", "comment": "Malware payload", "value": "a6d3051d6fc9d820361cc4a68ad8ad58", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "43d06793-ca60-4fc0-9e92-94afee023687", "comment": "Malware payload", "value": "102dc661d3c04c9c2c577ab17092402a0d9a805fe46c18a792227008a0b82328", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "c88ef3da-1f7f-4630-8fe3-f4e47ccf0393", "value": "T1A7634BE7B800DD7DF84AE77B8413090AB271B35101931F3A679BB957AC331E85D66E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "aecf0d52-9350-4bc1-bf30-3f5ff0381082", "value": "1536:JIrA50tU6IJ2iuhD8iIjoi+UI02OTWSgoIWmd2:JIE50tnIJduhhxUj2IXK2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822305, "uuid": "db670f6e-6fae-4b52-97a9-c29558cb93d6", "value": 67528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822305, "uuid": "b12471ca-a614-4063-804f-7dafeaacb131", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ae8ad7d-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "c34f1fe3-8a34-4644-a852-cd7b0d53be5b", "comment": "Malware payload", "value": "7e144659c0feb47d8b6a3180798fcc09", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "07f04c61-041a-48cc-b6ff-e3daaac8e81b", "comment": "Malware payload", "value": "e86778bfb02461a8219a2d8ae1efda77ffd9d942dcff60c9eb95df537b2e14f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "f3d1f624-03ac-43e5-89ea-75afbba30a8f", "value": "T1A1731856B8818A12D5D502BAFE1E118E33131B7CE3DEB3129D206F24778B96F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "0e991cb4-c8ee-4e5c-812a-76cc6a45e175", "value": "1536:RNnKdtxfldKSsxcp1ybpLWsagCCcPIDiMAxxVq0nfk5WYm:qdlQSycp1ydKsaiADVq0nfkgB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822306, "uuid": "fbb1c2ae-dc86-468c-846e-1a83b9bcf308", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "4d77b9e9-6260-4066-a6a3-e9c763ecf9d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "7d6ad3d4-7587-471d-90fe-25d0503ca094", "value": "t175e0c073c9180bcdaba842e7479f7323cd5a30e96e624c2b3f91bf9401238b402914", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f924ce-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "9fe4c661-a09c-48ba-90f4-8e394bfb1d1d", "comment": "Malware payload", "value": "9458b4459ba8c90817ef0e0775e93a14", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "053d4f27-033d-447f-a83c-6c81e34b34a6", "comment": "Malware payload", "value": "beaa0cad81db02c93c77dc0c6d2a25736be5194306fcafd4d9c2045fc75eb7b0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "948c149b-9833-4d1f-a905-5acfe5e90105", "value": "T1BB83F719BB944FBBEC6BCC330AA9170134CC591A22B97B3A7534C91CF64F64B46E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "57ec8c44-eb32-4223-a612-8e9c1a1fc46b", "value": "1536:l2Csvuic4qPjcIMbDL57Y7/vj98ca+cZ7Kma1EONZ/:l2CsvuKqPMca+c23NZ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822306, "uuid": "4f44c000-ff7d-4efb-833d-77432835c5c1", "value": 84808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822306, "uuid": "109cc823-6721-4f44-8c05-427963842048", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b344fa5-6f89-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822364, "uuid": "4ed174f5-a459-42f0-8c41-3167d7ec3c4d", "comment": "Malware payload", "value": "e92707c5b799b98cd9e09166d58930f3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822364, "uuid": "6ae398f5-a6b9-44cc-80b2-18b715776b27", "comment": "Malware payload", "value": "355a6f5e6e0357f3a6440ca408bc9c67899753e1662c0dd92ae6b6de892391f5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822364, "uuid": "1e2d631f-a365-44a4-b80f-602c7f6519c2", "value": "T1B673B81E2E618FADF7A8823547B78E21939C378527E1D685E29CD6001F7034E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822364, "uuid": "0feaacc5-97e1-427d-ae97-0cccf25e5b2c", "value": "1536:zvT16ORJA1M1rsYAuUAim9OrgT8YtKCe5dD/d:zvTYO01MilrgT8YtKpDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822364, "uuid": "3b934f89-bc1e-41e0-bbd3-23c380806510", "value": 80712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822364, "uuid": "7a8b0b27-fee3-4a58-9a4c-d244596c4cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822364, "uuid": "90f909c6-2dcf-4876-a916-3662d93b0eb8", "value": "t1c9113908993863f49bb61d996bedff71e49170ef47215e378e00e9ae5a2dc429a00c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29e71c2b-718e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1737822426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "72404b94-fefb-412c-8a54-959d982a653e", "comment": "Malware payload", "value": "6c7b4a201ac4636e8919af0832437b85", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "b0958b09-1f48-4d1b-b407-2b3e668e8653", "comment": "Malware payload", "value": "5f840514beddd7b09829d7c8578ca67b3f164711aa7e1dd7a776ab31c998262a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "z", "colour": "#6cbac6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822426, "uuid": "8f45c9a8-6ff8-4edc-9d7f-4d7c38ff9b54", "value": "T132533B02731C0947D1A35AB0293F57E093EEAE9021F4F68C351E9B5A9275E3A1287F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822426, "uuid": "f4d855c1-c9ce-4500-a1af-5d4842636ac8", "value": "1536:X1DQCmaiOodQFzpoYYkPmNp6Z8IL+1ICjp:jBACxqY7IE8IK1jjp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822426, "uuid": "e600c7d2-a011-474f-b37c-7876a4b129a4", "value": 61104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822426, "uuid": "0f9e4f46-0693-4f6d-b025-5c12548acc97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fc4218e-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1737822896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822896, "uuid": "1c3377ce-2c64-448a-9795-67ccd42f4d7c", "comment": "Malware payload (Xorbot)", "value": "5f73365279b5b96115b1ab625093849d", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822896, "uuid": "71a03639-8ecd-4553-a1c0-78d65966fe71", "comment": "Malware payload (Xorbot)", "value": "28decc329895d1f5e2d0d8fb3ea3b347d201f46fe158c92ff1c45f823aed1d9b", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822896, "uuid": "f3973de9-a047-4424-a047-4d66af8a2863", "value": "T1792201C412A4152209A6CE1F6AAA1CD41409BCC16CCC8F7DD8D8B9D9C54DEBE7986E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822896, "uuid": "23153611-3cc7-417a-be3c-cb3b68f25ad5", "value": "96:YqOq+qsyL3LpxLRJQL2n272FLCa4FqiRIIIEIE3ntWG1IyBy5y3uagko4zPZLjMR:nJ5syLwmgsx9E3n7D2Qx9E3nLQJ5sH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737822896, "uuid": "ba414bad-7902-49dd-a570-e97dafe8b155", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822896, "uuid": "7e1e39b0-a509-41dc-b8e6-d0f14b45443d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "930a0582-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737823009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823009, "uuid": "b028c07a-3c4d-45b4-bd6e-6a5340e15f2a", "comment": "Malware payload (Socks5Systemz)", "value": "c086dee68dae7a3733017161eb91b981", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823009, "uuid": "b687eb34-ee17-42a1-b9a8-acd1ba8abe3d", "comment": "Malware payload (Socks5Systemz)", "value": "855c762c9087f23fd2e8f7f619da4797e8a16c0ac73418d831c0cff5714d336c", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823009, "uuid": "6b72a794-a0c5-43dc-8f45-ae1633f1678f", "value": "T1680633C6D9849B31ECA468B10E629DFC303B57D09D7609F6704DC1685F1B36B0A4FA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823009, "uuid": "4f33fb9d-3d74-471c-a0f6-2ddd91a89021", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823009, "uuid": "d8728858-d0a5-4c13-9a09-80feb4e8f020", "value": "98304:42kewOtBzfs2o1Dl0XuH5NOQUr9UtFBrFLn:NkewOtN02ADGXuZohr9g3rh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737823009, "uuid": "67a6bb21-aea4-4705-9c41-120ec42a8970", "value": 3682783, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823009, "uuid": "a297a9cd-5e5c-42d7-8c46-a7b0bcf32699", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec1b5c1a-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737823158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823158, "uuid": "8bc3b2e4-46de-4122-9e42-efb4dfcd8175", "comment": "Malware payload", "value": "498ef64b4b08df5e88e28b48426c733c", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823158, "uuid": "f4da2348-7cbe-4e03-90d7-5ff5ae2b2f23", "comment": "Malware payload", "value": "130a5ce4a3e0d743974014b2d29a8129fe9b986a5cc6d8ee46d250cc7e9fabdb", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823158, "uuid": "08ce49b6-e1c7-4e9a-90d9-97823df628f8", "value": "T14CD0A79950263C5F2C1588DDD1720C427A85646D5D1116487F5D851747FFA1078617", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823158, "uuid": "c35634bd-d118-4241-bbc7-0e15cf9c5bcd", "value": "3:TKH4vEbJTAJvUdRNqUwXOoBqW+Dl3FELcUFF2TDNa5Yb2UBOSNb2U4kZAOKLAvn:h0J8Jaikl3Fqj/q4YbL7beIKW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737823158, "uuid": "95d2cbd3-1885-45d9-8d9c-f33335c71df8", "value": 240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823158, "uuid": "f2f158d1-139e-4b32-b2aa-8aaf243d5635", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b6b07f6-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737823318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823318, "uuid": "7b40b918-59af-4349-b528-23661104daf1", "comment": "Malware payload (Socks5Systemz)", "value": "32414cb2ab39604bc84c2a0ebbe3020b", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823318, "uuid": "2c5efe06-bd63-4e60-a5a0-7ffda39b7e1b", "comment": "Malware payload (Socks5Systemz)", "value": "f3d8ca857bd0e09b98935427357253fba4e89a7d8fa20aaadc9152ca422b81e2", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823318, "uuid": "fedc19cc-4bf1-4ffc-be8c-6f2062a78ba6", "value": "T163063328FB09CD7BF218C6716A15D51F4D77A59128F13C10B8C400AE1B9B8F66AC9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823318, "uuid": "476ee10d-4e99-4eeb-aa27-fc9bb5620c71", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823318, "uuid": "8ff3c3e3-6085-4662-8922-e93b0e523e4c", "value": "98304:4yGFS4i+UkXRpjlwyMjOK0LAAaUDe6+3NBn:9GFSCXnMyKLAaUDeNH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737823318, "uuid": "8b40e76b-61da-47b3-9535-dc46e7e072b2", "value": 3666310, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823318, "uuid": "a528ed93-9c8e-4862-87a5-657bb323490f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b585f0f-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737823748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823748, "uuid": "078ce166-3788-4986-9582-52971f6b8578", "comment": "Malware payload", "value": "3f740018d20efa6cb6c47964c955d498", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823748, "uuid": "1192b43e-d1f9-4bd1-a6f6-78523207a59d", "comment": "Malware payload", "value": "8f2264b77ee60e250505325660325a6a48511d857fe6f110a27084bae5544a7b", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823748, "uuid": "f650ffb9-b91e-436d-a672-3bba2f31edf9", "value": "T169953346AE3625E0CC9CF436E21686C43AA1419DBF07EB241E19397DED67E3EDB40D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823748, "uuid": "410da014-c68e-4163-9264-e31b28a0005f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823748, "uuid": "3f6106ef-8cec-479f-a26f-6bf2f5d84f93", "value": "24576:NloCVbqyviMIWqAAFc8Rl6wlCJK1zZM5IxYTtonsOxHHPD5Yi7icvyZfOCZ:NlfzviMIWUPz6woY98Ix6QsOxPNjPCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737823748, "uuid": "97792099-9ab8-41f9-80f3-67dbfc0f5a73", "value": 1923584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823748, "uuid": "193d7865-f97b-462d-84b5-472c32eb6b46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9044395-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737824012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824012, "uuid": "c956c084-303d-457c-9c38-6130c6fa2a43", "comment": "Malware payload (CredentialFlusher)", "value": "be12890cfedcfddc1f22f8aa32ac1b9d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824012, "uuid": "fae239b0-9be5-4178-8c91-b7e547d86b4e", "comment": "Malware payload (CredentialFlusher)", "value": "2d4e973edf59149bfb358f9f05aed578f6919d4f6252a152718e7d65e11de016", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824012, "uuid": "b27acd1d-c5e2-4b34-808e-1c19fe7fba11", "value": "T1CC259E0273D1C062FFAB92334B5AF6515ABC79260123E61F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824012, "uuid": "a29cf386-f1d1-4dda-8782-e52cc34a7445", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824012, "uuid": "01986806-166f-41f1-a1ee-a3fbce8bd695", "value": "12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgall1o0U:MqDEvCTbMWu7rQYlBQcBiT6rprG8ani", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824012, "uuid": "533afe09-2a59-41af-86b8-a049f7a0e4ab", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824012, "uuid": "c05759ec-8eeb-4785-9d75-c85ab3a630ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bffabfa-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1737824098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824098, "uuid": "aaa16c98-5c3e-4f38-bab3-af47e271987d", "comment": "Malware payload (Socks5Systemz)", "value": "9e8e281c5b11390cfeebfc0e564ee307", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824098, "uuid": "c39d2c60-b586-4b07-a0f1-9b63ba478874", "comment": "Malware payload (Socks5Systemz)", "value": "787983faf110fe555420109036338312fe22ccc6187655de761678297223353c", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824098, "uuid": "f0a062dc-0f3f-45f0-b449-e42486dc5365", "value": "T10E063323D2A7D970F4C2543107B8DA94593B32221F39216E76F81CE8676E63AE4BD7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824098, "uuid": "297e26c2-942d-4914-a2de-c2dc30a25e13", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824098, "uuid": "4d9b5f71-f9fd-48c2-b8d7-42864955b3b0", "value": "49152:e9ADdAsi5j4gdsbiFtXO63Zgf5kOdkHf4wl/KU4syZ9oN+wlMaw9MRMWU3j9TWyn:4ui14Xce63ZA7U4y/KPzD0hNVeJWgn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824098, "uuid": "aad0c9e3-69d1-4c87-8f5c-d8386c4d00cb", "value": 3683930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824098, "uuid": "3182332f-97a0-4d7b-a954-efba1f13d91a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25390490-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737824113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824113, "uuid": "16f34efd-2f1c-43dc-9c60-7ee0f7c6a63c", "comment": "Malware payload", "value": "5d63a281f146e5e0fd0b2d0fed89e3af", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824113, "uuid": "8579b17f-c4a4-44d0-a3c6-99d2aea7961c", "comment": "Malware payload", "value": "be1b6bda8104cab3ede7920bd62cdd4b2c7105288be6d42597707edaaceca933", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824113, "uuid": "9b08fc89-c7bb-41b0-8f0b-03854af5c669", "value": "T14F56337BB0BCFC2BADEB42B59180EB509BA091778BC3E43C3A54F4661455687B13D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824113, "uuid": "c5b60506-9cc2-4af2-9036-3dc41b62d2c0", "value": "98304:j/RvpRInZsL4FrYeS17LppsoLr5iCGwJ1JP4vq3rs6g3jKLAIoPrVgC2k4Uj1Q8:j/gA4Fr1ibxRiCGw/JCq3rW3jIoPpghM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824113, "uuid": "a241bd92-c427-4e84-9fd1-84862d52de57", "value": 6078939, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824113, "uuid": "4f6bc91f-f026-4f7a-98a7-2983acc22e8e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b4651bb-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737824192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824192, "uuid": "d8ee93b4-6e4f-4759-92e7-71ce5fb9e12e", "comment": "Malware payload (Stealc)", "value": "db5ef791a2d7ed8d368f09d45c970a50", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824192, "uuid": "48914e6c-f8de-4770-9511-42eff17c0347", "comment": "Malware payload (Stealc)", "value": "ffbc81a9dead234fc9d1a4a5208b9008c7b6af59a711d20627ee025ddc2a51e8", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824192, "uuid": "e5ac5d94-a5b0-4d21-8250-a0a99d3e738d", "value": "T122853344AC28057AD3BCB6B908E7CE5F5F102E6A7C8E570DBB548E7B7436F8C66006", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824192, "uuid": "c7fdb979-682c-4e24-9b40-d6a221a46e18", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824192, "uuid": "5c8056c9-5081-4bc9-b2a8-e42a0fbcd979", "value": "49152:GTklUERK4wKI2OtKeKavgNCtqiDp4f9b0i5m:GYlQ4wlkav+CLYB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824192, "uuid": "c7a2bc6e-7ef3-4ff2-af16-7acc7abe400c", "value": 1854976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824192, "uuid": "3e58ed0a-5ace-4fb3-b5d9-a446c6e09f7d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f3dc80-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824223, "uuid": "6bd1a223-2e15-4c14-bf8d-968851f4a44f", "comment": "Malware payload (Mirai)", "value": "2878985d7153cce1879d3854a1b5067e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824223, "uuid": "45327f71-ffe0-4139-92cb-99ac386658a1", "comment": "Malware payload (Mirai)", "value": "b182850939cbc099c5529ff84d9936b556667474d6440991568ee657b31b062c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "d6d3fbbe-2690-4a15-b05f-2bbac500c062", "value": "T1C94176C61222093E2CE6DD27B1F4860471A4F05634C69B18EEDCBCFB624EE543C566", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "92e8bb7d-3ad9-4a83-a4dd-a889b006586a", "value": "48:wms4Pg9jUIf4PYhA4P5cQ4PYH4PGq4PcZ4PiX4PWw4P6TP4d:wm5g9QIe29WNYGGLc0iWWt6Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824223, "uuid": "be4e55ae-79a2-4c00-b583-5b1787081599", "value": 2003, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "bd4c6ed8-159e-4b76-a322-4cf768b4ad2c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66fdfe09-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824223, "uuid": "317cb82e-bfaa-405b-af53-8607e81c41ed", "comment": "Malware payload (Mirai)", "value": "9891d1597cf4ebe11d017b3a5d69a818", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824223, "uuid": "771efb16-0a9f-490f-8f18-5da60ecb29dd", "comment": "Malware payload (Mirai)", "value": "18cdb8bd6f01d41cd5860d7325c2f2bd4a2f7e78adae721b94e527f5a7396ac4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "4e526ec6-42a9-4b74-9dfa-39a59ae8148d", "value": "T1EE01DBCE21B2565F6A65DE1EF4A6870C5021F0C030E68B59FF18AC39A5D522038396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "08821d30-9ead-4f4d-9f33-608354d6708f", "value": "12:3J3GmcyGmcrLTGmcBNIl5tGmcK0LKYGmc1tJlGmclsQGmckxGmc7BqQGmctTpGm7:3J3yoNI7+Ktt8sBWVB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824223, "uuid": "240b9be3-b391-43c9-a299-83ce9fecd23b", "value": 805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824223, "uuid": "74e3bcdc-fadb-438d-9b4f-3a7507055b6f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b18491a-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "5419c9fc-f1bd-4bb2-9fd1-3aef214695b0", "comment": "Malware payload (Mirai)", "value": "947010e6f279e4e7eab0cc1d65fc8145", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "571f4498-3fc2-43af-9bfc-99e0639c0818", "comment": "Malware payload (Mirai)", "value": "f8f973f883498d8df77131d155563de643d56a62de54dd9da8cc291521fc4975", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "3dff937f-0743-4c30-9a95-6818b441ffe8", "value": "T168B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "e56ed4f6-0162-4c7c-8d3a-57d7e0903599", "value": "1536:OTW/VCxsHZusH2Li62C87mKjR5fvPVWARouW8j3W+gJH7W:OytCxsHx62NVjzVWxuWM3bya", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "8ed7849f-9324-47b0-a1dd-ae4ba4e810a5", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "aebfa2ed-039a-477a-aebd-b2bf4b7127a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b198250-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "2a5f0fe4-029e-45be-bd6b-61d56970c4ee", "comment": "Malware payload (Mirai)", "value": "49c2cb7f361eacca4c54a5d57ba20812", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "f06748af-c09d-4569-bdab-51151aaf966d", "comment": "Malware payload (Mirai)", "value": "7961302bd9721c91ed65f8fb6eb77a2cf953daa9654c9516f03bfb379558541f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "9b5716a3-b5c1-41a4-b5fa-024dab249eeb", "value": "T1C7937CC0F683C4F6E84305B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "7b18f2ff-407c-4f7b-ac30-1ee2a7099bfc", "value": "1536:W/QCZaxGdvts3i5JPhoTIxPu++ALtgUIKqI4FrS4LSE:WYCZa8dvm3oJPhWIxP5htSKfUmDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "0bbb3e88-f5e5-4561-8b8d-87892a171304", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "c02a3597-0df8-4c23-84af-f0dcc026466d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b1a2ece-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "c08dec6d-01e9-4fe8-a0d1-a4cd6115224b", "comment": "Malware payload (Mirai)", "value": "8cdb74c68ea9376e85f873d3cc8c1ead", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "ae7da5b1-9520-4ba7-8476-5d438f5fdb52", "comment": "Malware payload (Mirai)", "value": "387c660a96469d7f9aca76391473ee9055c48ae8f12a706161ef3028bc494b39", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "19bfb3dd-2218-4181-b281-ed8da56a2fc1", "value": "T18804B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "95eb228a-feab-4af1-9afa-acfe21d6cb68", "value": "3072:nKpzGIeNkSfcQqmav8SqaRVlnYz65VVt:nKYIeNYQqmeqavlg65V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "85f19ea6-42d0-4985-8ca5-d22072d1c690", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "4f3b7bf8-0d24-455e-b0fd-72e5b69d0535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b1bd779-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "0d549ac8-aca4-4e92-a4a1-3a5269306b3d", "comment": "Malware payload (Mirai)", "value": "355e6275279e244383367128d8502d9a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "3c87341a-6d21-4f62-8ba0-3ffe2edd5fd6", "comment": "Malware payload (Mirai)", "value": "d09fd890e4b076ee1af801729fb2b2f4bfdc86560efe90d270f53c34ea8098a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "d8bf0634-7173-41c4-922e-76ee44f312a0", "value": "T19ED32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "be02bd08-5089-486d-a37c-3a07cfc6f6b9", "value": "1536:troGHNTUZNJlIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg8773p:3mkUiCxttqCwZ7lLhrIf3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "d1d9a712-64a3-4836-9043-b36b1497d47c", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "2c6e6673-eb62-4319-85fe-2436665c64fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b22e177-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "72d79dd4-577f-4edf-84f5-fe3fe81d5665", "comment": "Malware payload (Mirai)", "value": "937ec53d7fbe07a535d130658b101597", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "79621695-80bc-455e-8aa7-834fa16da901", "comment": "Malware payload (Mirai)", "value": "f8bb0345f9e44c089a17799f2e7782fff20a79e85f3c7be759ed4f6d5d404a74", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "bd977fbb-908a-4b56-b304-e8b08afe83fc", "value": "T1B7E30B46F8814B12D5D111BAFE1E528E37131BB8E2DF72029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "22965bd4-fd69-43a4-8cea-d2cacae36f43", "value": "3072:DHea4CTRUjnwJIXMb6kzz5aTHACdYV8P4eL5:zePCTRQ6IXu7zdaM38P4eL5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "c63e9d01-3045-47d1-bfb8-6e521861fafc", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "bd8b6d5f-8944-4bc3-9286-89405c0489e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b233c21-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "54854503-aad7-41ae-8aa1-30368ab8f910", "comment": "Malware payload (Mirai)", "value": "3dea45d833df3a15c5b46fbe3101b811", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "e3230014-3389-4e78-949f-e3743461642d", "comment": "Malware payload (Mirai)", "value": "c21d0702402aeef273852d53e128596db82875a6655f522daaf185e182452f85", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "0cad65fd-8ef0-4774-be7e-532feecf2fef", "value": "T1D9042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "e3ce8e05-487e-49d5-a13d-ae19c73ab876", "value": "3072:OLe6vhwZQIvuCeeuaMuTuRez43IVILQZQy38YhTfYo+M/RgDlplLn:ee6vhXIv1ruaMuTuReErLQ738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "bc534203-edc6-4630-90e8-626cd68b7e7e", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "59ee441b-7387-4206-aecc-1a6df7f7f73c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b23659d-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "62683a40-e23b-4fc3-b8d9-96f841d88a10", "comment": "Malware payload (Mirai)", "value": "4511286b9a7f469cdfb8670dc0dcd8d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8fc35069-7ac6-4801-ac35-ab4ee0ae4037", "comment": "Malware payload (Mirai)", "value": "876103ba544ca2f32d9b71bc4b482f335985d77113d4f6a68c8dde85588b0f13", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "e203279f-4854-4257-91cb-2b0386103223", "value": "T133D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "1f075b4d-8182-4c7a-a672-f3a1446c0c7e", "value": "3072:79eSuygEPjt6qkWq6dKmDnYMb0gBd/gQyVGsdqml6Xaj:79eSuygEPjt6qkWqpeH2laXa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "b8dc585f-210d-4173-a30f-9015f199d843", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "35ef6776-b4aa-4c60-a01d-6d4f273c7fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b27268e-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "b14c49b0-af2e-4b31-a042-54e1ef2da178", "comment": "Malware payload (Mirai)", "value": "b76a257aa1acc0849a688ded675baf66", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "a63b8164-7234-466f-bca7-96573836a832", "comment": "Malware payload (Mirai)", "value": "b67e5afa3e1cab4ce8d1287947c5a2c9c7676d8a89bb2b8afe019a516ce1d24b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "190add77-fcb7-411e-83d8-edeca9463aba", "value": "T1E1E329C7F800DEFAF80AE33748570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "a7914e31-1e45-422d-8890-f428fc3582fb", "value": "3072:KmzTDH86JA78VCdV5jAti2id2ow9+aVvjbitLLxGyMYESj:K2TDH86JifjAtiHde9+3L4yMPSj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "e978363f-46de-4018-87eb-c22120b64053", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "fce03e13-7ddd-4d66-b47a-bd54141c0fdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b2bcf0d-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "88b4a775-9574-45ed-a880-c186d5a19596", "comment": "Malware payload (Mirai)", "value": "a48efff04ca1ba4f91d552aa156557df", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "65b4ac53-e90c-40b5-b835-a6e9baa1f7ac", "comment": "Malware payload (Mirai)", "value": "11046bae8ca88f22e87db47e3e1dbb238bcbb97d430da790f7b1b792a289bcac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "cc8bb978-b15c-40ec-8ef4-2116a1c400dc", "value": "T18EC31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "0b2f063d-ef5a-4c11-9b68-8578328168e5", "value": "1536:p/Ka0rG5yC/cMChygtsOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQo:ZKaprMh7iOXWFh4UXcYFkWpZlvWNUma", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824284, "uuid": "bcfc8a0c-9262-4987-88a0-cf4bae5a8603", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824284, "uuid": "9565d8f1-2438-4d58-9bba-474631207cdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae546e8f-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824343, "uuid": "dca90abd-0cb0-400b-bd93-62579ce03a3f", "comment": "Malware payload (Mirai)", "value": "81a99470c24134aadb86691f1641a0f3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824343, "uuid": "bdecb9cd-5e25-4abe-a680-4fa4a65de507", "comment": "Malware payload (Mirai)", "value": "548cd4c3e6d0b344d823deb850206bba6792122f70a7bf75c5aa5fc89a33a18a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824343, "uuid": "82fd5893-5e05-49cc-921e-eae658836917", "value": "T17E04881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824343, "uuid": "7bdd94fc-06b2-48ab-86c2-10e04d30c045", "value": "3072:jg57RN7LHZwbq1YSBan1yvbysxr1uGSHI:jglRN7LHZ0Bqyy1BSHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824343, "uuid": "9b05057f-bcc0-45e3-b80d-a2671b01e38b", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824343, "uuid": "dd0e0bcc-2402-4324-a409-804fd870e6ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2970c07-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737824404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824404, "uuid": "6b633cb4-b005-4d2a-a6d6-c83c68910a86", "comment": "Malware payload (Mirai)", "value": "5c2c120cfd2f7c67bb8b1d0587c016a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824404, "uuid": "a5c43b92-6ab5-4c6a-abfe-a76ab182ebf0", "comment": "Malware payload (Mirai)", "value": "2a92fe52020b3df191fdb3b17e06b4dcb06c12b217ef3549a7f91e3fb9bea804", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824404, "uuid": "05e8b677-85ae-4df7-99a5-f1d7596d0926", "value": "T10CD30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824404, "uuid": "4c4a8f9f-46d9-4145-9a1e-590ef233d4eb", "value": "1536:UFKdzElm18uZJNb4ArFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTX:UFKp50UU8e947Lb71izSftBdRalKa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824404, "uuid": "9a976d8b-6dce-436f-8af0-d8b3d100a7d0", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824404, "uuid": "a350f330-8b6e-4682-b75b-e312725b0ce2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc8d91c2-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737824850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824850, "uuid": "f71150f6-6e2a-4bdf-98b5-9247289843b3", "comment": "Malware payload (Amadey)", "value": "c2c27cdae6f8320b74f71f56976defe2", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824850, "uuid": "a7dc3aa1-6144-4381-85a3-521b986419d3", "comment": "Malware payload (Amadey)", "value": "e4110dfd0279e5cc8d565bb0da1fe6fd1492193ebcaa5dab992baa9f9b4e4259", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824850, "uuid": "f5a29ccb-520a-47e3-9514-a1aa40a05c8f", "value": "T1DA95337537A4D1A3DD3CCAB0CCB77256FA3906C050A994B98A0913734BDFAD0D66BC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824850, "uuid": "20b8d61a-246e-48d6-8c4f-f57c606366c0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824850, "uuid": "89c9b77e-6615-4970-b36a-950037add029", "value": "49152:aERbADKHDjHJDuZpVRekGYrRCaSsXFybZM+:aFKHD7iwYrRZSqFybu+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737824850, "uuid": "6eb2c8d2-69d3-4e06-bf31-d131971ad06a", "value": 1909248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824850, "uuid": "cccfae3c-3624-46ea-b99d-566a280989a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9852d8a9-db41-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826024, "uuid": "c012ef4f-abf8-43b9-a96f-7784951bcadf", "comment": "Malware payload (Mirai)", "value": "bf9d2415b30e7d1988c5096b465ede45", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826024, "uuid": "ba8197e7-dfd2-4e16-81c3-8bf704dff66b", "comment": "Malware payload (Mirai)", "value": "98f28208eb6d2b0227845418c87a4cd93c43f4a6380c60cd7b70778e88660524", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826024, "uuid": "5dc6e73f-d160-493f-9252-dfc657b64119", "value": "T105410CCA31554FB12FA79963B2F90884F18451851AD0BEA899EC7CB8488CE0675CCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826024, "uuid": "e0832152-6e9a-48f3-b752-2011b17c9073", "value": "24:vTyd/s//sc/sxld/sAKM/s7G/sp/s2JHZ/sX/s3h/so/sQRL/sgNeH:vOGMrLGA07RasHKkCP3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826024, "uuid": "e79d4c8a-63f8-4c54-bb99-d100aa8b74c0", "value": 1976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826024, "uuid": "88f3bff6-4417-4218-8151-eb51d69ab0b4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "939c3dec-da74-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "682dc9ba-e8a5-4488-8ca5-4c15f102324b", "comment": "Malware payload (Mirai)", "value": "755001c9e6dad7cf07c3ff1da5e1c1a7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "956f315d-b3c8-45fe-86a1-27dd35820e48", "comment": "Malware payload (Mirai)", "value": "e4faa2ef48df9f31b26744fc8fa03202a926b1fc402d3191b8d5ab3fc323e23d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "b7532ae8-31a2-4c7e-9805-a07f4b670af0", "value": "T11B030791BC824E66C5D4137AB67E1ACD372063E8D2CFB203C9115B647ACA94F4D32E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "17a1dc37-e55b-4ca1-adab-724ca0eed391", "value": "768:BZmMEaZ8PFqTSzMCk3mj3lmO0Fql1w1XCl9eORF3Cgl+1siQyPQQHv4U4xHfwW:BZmMEaZ8PECkeWE7nhFll+1rvQQHaoW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826085, "uuid": "20778b54-426c-4a31-8bb6-33dfd69a2cc8", "value": 38796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "d0763b61-fe72-442d-9b22-dc0d47a63484", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcd96785-db41-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "79dbaf24-db3c-42ed-a976-4c86524ff165", "comment": "Malware payload (Mirai)", "value": "994ae009b4b6dda392cb282dd093a5d3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "10d76eb5-c1cb-42c6-834b-9ef0d5e48b4a", "comment": "Malware payload (Mirai)", "value": "75dae13e770c7b122c15768153a01dc8b352749e338c3b811822d8dd8317d646", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "58de71b3-3ece-41f5-8593-0c63abe289ed", "value": "T164637EC9E283D8F6FC1715702036E73BAE71E0AA211CE696C778D5B1FC86941A117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "e49ee882-964e-4185-bcb2-409e93b61915", "value": "1536:pnUQJZdRlDAXO6QyQwOaOAa1xhx97qJ7RvsuIr5bhq8o:pnUQJ7RlUXTQpwOaOAgxhn72+uWXo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826085, "uuid": "85a01f9c-e4da-4e34-a7e3-b566acb01402", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826085, "uuid": "a7b1b7b0-36a7-450b-b6a6-342c4ea24334", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "578b0a00-da71-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "ec273468-716b-4fee-bf8a-36942bd04db8", "comment": "Malware payload (Mirai)", "value": "17c846003c245106e07b53a0dd62d42b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "f4bc6981-7d9d-447d-b46b-3519a8e0083f", "comment": "Malware payload (Mirai)", "value": "3b45d2cfdf861ff83fc8dc61f9971ac40d061021351249de2cfc4b1d17e22eca", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "54cdf233-e474-4ee3-b299-2f08e7f08157", "value": "T1D5730845F8818A12C5D612BBFA6E028D373657ECD2EBB2139E216F2137C6D2B0D379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "48e3b61c-da0e-4113-9567-fe84305f4022", "value": "1536:Bj2/jQ4mdl+WnieLxNx4AoB49vYlAZ1lSaFDaEPhVq7QGzNIvBW8R:H98qLqAo+9vNbSaFDaE5Vq7QGoBlR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826086, "uuid": "464a11bb-c294-46b5-af9b-df986238c891", "value": 78936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "863de8a0-9052-45cd-9ed4-2fdde8fe6105", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3df9ae-da6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "ffc3029c-5e0b-4556-b0fc-47acc4b3e23d", "comment": "Malware payload (Mirai)", "value": "2ce5927c4f17dec23eb027c7bb87a000", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "6cc330b0-7ec4-462e-8cc9-e78ea0a5c25b", "comment": "Malware payload (Mirai)", "value": "1aaf3cd61ed8682c97f67eba3ae80b568dc8188303e9aa19fcff8e304141a46d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "31448003-3a7f-4a51-a9b2-0314458295bf", "value": "T101834B717B360E17C0E4A57961EB4B26B2F547CA11A8C60B3EB10D9DBF659603603E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "c3199a47-6913-4906-8e5f-39ef89da378f", "value": "1536:qLhgvWQs3i1VZHWy6XMWPRR0zQVIWoQrwNbsR7OtpQtSDVtcUE:qLL/XMWpXIWVrf7OhDV2UE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826086, "uuid": "44591f57-6281-47ab-97e3-5c57d8aba2e8", "value": 83428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "d2116e3a-4ebc-4a65-86d0-a310d0f76f26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40d30fbf-da69-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "b20ea3e3-9047-4085-b741-279eeadcbe5b", "comment": "Malware payload (Mirai)", "value": "816ac7c6f9c05c7df0d29188f459a862", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "2159815c-ad59-4341-b4fd-20fca7e77140", "comment": "Malware payload (Mirai)", "value": "e652f06dd664a2f47fc0869a8f5cefe985e7e3db6fcf691ee301bd5427d9fabc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "4bf2dbab-7242-489f-a8ef-5789627b6cde", "value": "T129835BCAF801DA7EF44AD6374C534D097671F2E10A831B3663A7BA6BFD36198241BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "70845c54-4c14-446b-a566-8b4d03aa7187", "value": "1536:+MKh3siP49D+7Dm81XqQ6tQeuacWjcW0JcWcBtv86GbIZiWZP3dcWL97+dIWccQi:IJsiAo5qNtQeuacWjcW0JcWcBV86Gb4E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826086, "uuid": "b26feb58-8a5c-42b4-9d27-c4d2d6864110", "value": 85776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "c6f487e2-594d-4ad0-84de-0bf156389579", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f30d32d-da71-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "625a36c4-58f8-499a-a186-7a4da1ca4ad7", "comment": "Malware payload (Mirai)", "value": "45a68f311cea541b6d3aef3eb0116c0f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "3793be9e-199b-451e-b4fa-9ce233eccd2d", "comment": "Malware payload (Mirai)", "value": "eb9fba27e7b10fbab00f31bba82d2816955f3a3f57f2e8d94dc3ed1f4feb4381", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "5636e434-a1d1-4ec1-a87a-b2813a26b920", "value": "T12473F756B8814B11C5D512BAFA2E128E332317FCE3DFB2129E206B2477C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "33b95049-c972-452a-aac0-5f7d54dd2d95", "value": "1536:2lntExPgXkpdDHkM7kdxO4uKjWkcaoN0sIci7XzWv+AcY5sYIWY:bxIXCdEdldlcaZXzWv+AcYuRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826086, "uuid": "7779fe61-d149-4daa-b46e-71652e4bca94", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826086, "uuid": "7d9cc9bb-c56e-48d3-868c-9a0239f555a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194c91d8-da5c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "4e63f1c7-7a6f-4344-b88e-c2d591540d57", "comment": "Malware payload (Mirai)", "value": "650bbfd5a357aa21ff77c80e74fdd73d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "4c94379f-1bfe-4ff7-bb6d-c858ff76c22c", "comment": "Malware payload (Mirai)", "value": "7a83ffc4f8fe55b5b9e12fa51b4d2276539808063a4c389b06f47d0322a266a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "9a98fe42-3fdf-4573-ba06-4ee00ea58df2", "value": "T162732902B31C0E53C0735AB0253F1BF1A3FBADD122E0F685355EBA9586B5E325146E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "998add90-f439-4393-9ea2-0d256cc4284a", "value": "1536:TebJgJR+9PevYc8/UsCR5phlYpCnKKQnBn:YJgJckL8/cMpCx+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826087, "uuid": "64c3e659-f0e2-48b6-b70e-7cb40593b439", "value": 74928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "867d6446-aa36-41a2-a6b7-47faf597e671", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fc35bd3-da75-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "95a82cef-413b-4a78-b5a6-fae3070f3c4c", "comment": "Malware payload (Mirai)", "value": "62b38f65049c20843ec4feae5a755a0b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "0807090b-1fce-4df6-b568-d9167e8d8756", "comment": "Malware payload (Mirai)", "value": "920e290a5d7af79eec7f461a92d3c99035bcae5f7ce076cd16640b626754f3f9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "36a0513c-9c6d-4f3f-bff9-f72d0ce6dc83", "value": "T173536AB6E4082FA4D0955D7075388E791F23E0C452532FB666AAC3B868C7E9DF100F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "0f400103-306a-43eb-bb8e-011d680b039a", "value": "768:rUdurywH43EpK6oeDY7akzFAD3O2Q8lf6HRfpSCRP73hjIqwWwI:2Gy23KdyWZ72Q8lf6HRBSCRrhIWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826087, "uuid": "2aae9fab-7b00-45cf-b9ce-3b51cc4a37df", "value": 66644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "e3f6c5e6-ad30-481f-806e-518e4b5e5cc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65317591-da6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "889fa24d-1305-469d-95a1-1d9e79e4152c", "comment": "Malware payload (Mirai)", "value": "5cd89422c2235fe8d438ee36335e4ed4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "a543205c-7e73-457e-bb65-f338e9dbb8b0", "comment": "Malware payload (Mirai)", "value": "c927ef544127232447590caac709c2476067cd5b02aec2688d86912882f30f6e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "9dbd33f4-39bd-4234-b048-6a9f14c754d1", "value": "T1FEA3F81AFF214FF7DC5BCD3745E81B0625CC994622A97B367134C828F65A14B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "e202e91f-12e2-4808-a22f-90ced0260eff", "value": "1536:ErG57Za55vPc8T0j19ysiXeBdl4W8OVdSGTQsrLP/KI/W+s:aG5VSvPc8YOYYG7f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826087, "uuid": "ae508493-4888-41c0-8c17-30311ffc5630", "value": 101068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "4ac15407-40be-40da-9c35-f9075bf061b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0521cf3f-da70-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "43f95a2b-43e5-486f-a6ee-4955394d36b1", "comment": "Malware payload (Mirai)", "value": "53326a16a34727a38a6edef432dd9cda", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "b88bfca9-c939-4bbc-b110-88f42f40b0f4", "comment": "Malware payload (Mirai)", "value": "820f616da42d19b03d8d249be2df238dc1fe756ad5618f4a0e71289aa1c273d0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "6b34e4fa-6f77-4ea6-b2a3-87394f109889", "value": "T176A3961E7E119FACF769823147F74E25675823D627E1D281E2ACC6102FA034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "97c76d60-262e-4774-adc1-ec375ad23fd2", "value": "1536:grkwNwUsyUEjebsfK2hmwdEgrZQP7pXWh0BaXDsfYWsk:gtNwfyUIUAr9zsQdk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826087, "uuid": "05eacd55-50c8-4a08-9aff-3764d1e82596", "value": 101068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "d1494d64-179d-4d05-8584-4f623983efa3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f06a1d73-da6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "6ee1d9dc-1d76-49f4-81c1-287bfc02a6de", "comment": "Malware payload (Mirai)", "value": "8d8aa6d4a6b01ac8ea845b20cc34af2d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "ecdf0bc4-7415-4353-aaa9-ca143d778fe3", "comment": "Malware payload (Mirai)", "value": "c6de77dc7872f3e99f57bb8c4a8e4c3f959fd6f7e40b9b29b028826e369a732d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "c456706c-6337-4b11-958b-0671a465b3fd", "value": "T196436BC4F643D8F5EC8705702077FB379B72E1E922A8D647D3B4D932AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "abd87bc6-afd7-4b47-8fe4-0ca7b6316d34", "value": "1536:JeESt/basV2rcZhG6ySN7naDlSR9zWOIaEjrqMPs:JeESt/basVTgS7naDQRVtXESE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826087, "uuid": "2e777e99-e744-4705-8332-cf28d8f8082b", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826087, "uuid": "26a6b063-fc8d-425f-b455-7b08f2434221", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb369405-da78-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "45687fb3-0df2-4fec-a7ff-b6cc4c031423", "comment": "Malware payload (Mirai)", "value": "84ddfcaa15e1139dab7c1e22cc6024eb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "13d6425e-421c-4c2d-af9f-a4be21c9e912", "comment": "Malware payload (Mirai)", "value": "392084ae5ec6d21051fa38bfbe4323869f40fdcd825fc0c0f11b604b4cfee80f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "beaa9cff-f856-4cc7-9cd9-bad9b7b55039", "value": "T198534B17B58280FDC09AC1744B2BBA3AD93775FD0378B2A677D0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "9ddefca2-7aeb-403b-9ff9-622265299646", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQDLiKimfFoktCe3fYRM+:WShU3q7cEDlCK/0DL9i8Fok06fYR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826088, "uuid": "f92f848d-bd01-445c-a500-58420d0a6533", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "a1e0855d-28fd-41a6-86e8-ca1f35c7670c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fb7be39-da68-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "0cf45cff-3521-424f-8ddb-5eaccbde48a8", "comment": "Malware payload (Mirai)", "value": "3248ffea9833193991c7c914d5e148e2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "127cbbb1-c9c8-4421-b619-1d9a185c239e", "comment": "Malware payload (Mirai)", "value": "9c43c155960ebd7aa334d76e6fb7396edd182231a14767250fc00a350b74adba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "bc865b59-14ff-4296-bf8c-19503afa7264", "value": "T124E32B56EA408B13C0D61779B6DF42453333ABA493DB73069928BFB43F8679B4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "fdf74dd7-a659-4632-b783-fc6c71719f70", "value": "3072:eJLce5p0pHdGSEaaHbz4NrA/Jt5IQ1FqUXMk/M/983kY:eJLcHdEaaHbz4NU/JrHqUXMcM/9IkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826088, "uuid": "33c9e2ee-4716-40ee-80c5-b4c6b2848bf9", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826088, "uuid": "49889c73-d3a3-4f57-8279-c20656553537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09ee713f-d99a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "a8d3450e-f921-431c-9dba-5ffaeb7c6bbc", "comment": "Malware payload (Mirai)", "value": "0c4add03ae85ade3d63049bd8a864bb1", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "da0be1c2-b15c-4021-8cd1-6b769bfa33e3", "comment": "Malware payload (Mirai)", "value": "292c8f5ad693f33147484f81fe5d586f973d7f0242e5abffab0a642d2a11c99d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "5dc4896e-9e2a-478f-984f-8b7a3287ea78", "value": "T11E630986BC80AB29D3C01777ED6F109E3300B7D8D1DA3246DC245BA47B8ED6B0D66B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "3fc39962-6b36-438b-a5d1-3955ba12f654", "value": "1536:LCgZ+L5cRqi7fDyHe9ZAeSjgLf1XfU2/Akiy:GY+L5c/XASfFM2Sy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "a6848f3b-31c5-4cdc-afc2-8c09ecb6d8f1", "value": 67564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "575c797d-918d-466c-be64-c91293d481af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8eb4ed85-d99a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "773bc902-7050-4061-a547-81cfef3d0c42", "comment": "Malware payload (Mirai)", "value": "08d0e5031495029948d093c93bd64e94", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "e6d7b3e0-3473-4218-ad98-105404970661", "comment": "Malware payload (Mirai)", "value": "64145b3c4b08fa25fc2edb6b1402f97674d166c67f87c1294616171c8304b310", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "947d050f-4e10-4b15-8c01-4563af21ae4c", "value": "T1D7633BC8E5C3F9F0DC150A3D707AAB725A77E53B2139ED9FD7A81966A902302D4023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "a72f640e-6954-4959-9c65-069c1a54426d", "value": "1536:mOhjXtM7ayXRulHeEqPZTS0LDi8eK5J3jw0hwzbQ4:mkXO7ayUJeEmZTSSD9eK5FEQwnQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "af2597e4-4308-4607-a4a0-0cb280bc702d", "value": 70416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "019f961c-b55c-4f5b-9fda-12a2fa98ceb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6cff9ca-d99b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "9690496c-2380-4613-b73e-75c296ab303e", "comment": "Malware payload (Mirai)", "value": "b7d0f4c100152564e37bb322f8330a23", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "c5899c31-a698-4a3c-b770-4a648032d75f", "comment": "Malware payload (Mirai)", "value": "dce3a0dadd476c0c4919aa33cbb105d3b174ac384f389567ad60067152f49f3a", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "7e3cbc9f-6fe8-44a6-900f-279416d3e56b", "value": "T169733A753A46F63CE9A590B8F44329D125220A083FDCD5E37C83603ABF71B89716CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "ba5c79ee-ce9a-4f5b-8f96-2cc65669411d", "value": "1536:/UgbFv0B4ahtuOtKG3gDMtQVBIVCCfy0K9ufCNn:/Ugb10B4bOoXDpuhaNn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "25388f56-a327-4252-9722-80e341b0c0e1", "value": 75132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "0c1d8eb7-eeae-458e-bac5-a0b1fc42e8a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbf09e32-d99c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "c3665b54-0ce5-46a3-82b0-7eb73193dfad", "comment": "Malware payload (Mirai)", "value": "7283140548be0210114401675c3f177d", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "2bfd4ac2-982d-485c-aa17-e2d43740de0e", "comment": "Malware payload (Mirai)", "value": "14d098c452d7f3919b25824deda29b44519016ac477eab88db7f12ef975a5f05", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "e906429d-ca36-4be7-a96c-85a6190d9db4", "value": "T101632AD9B4019FBCF85BD9FA41264B0DF52162009E530F27B627FEA33E620A6D943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "f9adf15e-883a-48cb-a873-52b02113be68", "value": "1536:6Zw62k7o8PlqnnqJktfM0wq4hfQJ5PBv7Sl8p/nvO:fVk7XPlqnnqJKM0wqkItv+2PvO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "99ddf625-7a3b-49b2-91f1-1715e74f9498", "value": 72728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "4fdff2c3-bd9a-4f76-9e09-45ff56f5b274", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e1a780-d99c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "e577efee-c7ba-4de5-8cf5-ab2dabfb5da1", "comment": "Malware payload (Mirai)", "value": "231548bfc09a4725abeb1e730243feb1", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "35f22e41-7031-4580-8883-fce1aea67ef5", "comment": "Malware payload (Mirai)", "value": "400839816c1e6280ca2c3c6dd5374a79f2ca296e17983285038de158911e36c1", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "cc0972e1-4e16-431a-b630-21ab3aa5ca14", "value": "T1AFE33C86EA409E13C4C51776FAAF514E3322E794E3DB33028D185FB43F8AA5E4E576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "1b1eddae-31a2-4e73-a71c-7c37b6a72fa3", "value": "3072:PxRizSAt/6R6Ii24dO21MiFN3ZOfU1CUeYJoMeNGy7ap0kM/9lnr:PjizSO/6R6I4bGfU1CU7OMM7apnM/9lr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "c22410d4-fc74-429d-9b6f-39a0d4de1f62", "value": 150354, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "06cbc4c6-39cb-4777-973a-4500b0eb3645", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45aa6e32-d9a5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "7ed0cc47-8e13-4289-af9b-68a37816169f", "comment": "Malware payload (Mirai)", "value": "7384692df5f8dbb9e0a71528d2162a1c", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "09e3395a-7d0b-44a1-8514-bd7df4d18213", "comment": "Malware payload (Mirai)", "value": "17bf7c47a2728c324b99be2b36291f57ef30f6bc76bebff8afb50228eb29c42d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "09006d88-ec27-431b-b71b-8bccfd4efe99", "value": "T1A4733B85F9C745F6C9178934A0ABF23FCA31E5794070966DEF896F32DA27B0191122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "bdfe2d27-7156-4fd9-921b-746b785524a0", "value": "1536:Kt+qZs87flIJGrw7VODopsKqhGqTvkzdit5m5avigkRMSlubQ:Kt+grLqJGrw7EDop4hGqT9oaqgkRzlCQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "3105c076-86a5-4080-8adb-1b69bb9eb0ae", "value": 78608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "185fb258-fc33-4958-9287-0f20d4d5dcaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "396794f7-d9a6-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "769a7380-2d3b-43f4-944e-b2448045b2c0", "comment": "Malware payload (Mirai)", "value": "2d1f24332c90e0758db09d2a900648f9", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "8c63f547-1417-4723-912a-9095cd5b8b69", "comment": "Malware payload (Mirai)", "value": "ab7cf3f2e77de532cc511562a8ed07d73bb44e60ade8607f9714d61700f14dcd", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "69ae7623-31d4-45df-8058-4ace17709ddf", "value": "T1C5634A0077588E07E5EA1EF9283F17E4C3BEED4011F4F4846A0EEA1A4235E73595AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "283f81f2-312b-42c8-9e6d-2a34d3ea0425", "value": "768:l5yraeHdAlaDjuAcoqRL9ChO7p0cyk+g8g/TpMHm97xCPHFJL4R5PZkE8FOS7uUv:he9moqmO7p0gv/13Ylt4Kro5kubIYyB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "45246cab-2880-476b-abf3-f9f2f9a671c0", "value": 71056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "8ff025e2-c2e4-411e-9e35-269ab5535c34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccf4d7ba-d99b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "af43584f-0f9e-492b-ab6b-89e0d3c25cb1", "comment": "Malware payload (Mirai)", "value": "c695dbc0cb0c0c101edf37cff93e6ced", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "556a75fd-39af-4300-8551-70afb676c91f", "comment": "Malware payload (Mirai)", "value": "ae7d5667442a6b8a9f641eed58981ba06165ff3a6d7e1d7d1112a47ee00f1c26", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "0275340e-dc3a-4796-add1-e06a75e49025", "value": "T153735C4AD7CBF9F0CD410678306BAB35D93698323234DFF7E7D8B557AA56212A0422", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "33274fd4-c57f-4b7e-9c83-a0668270211f", "value": "1536:7NKUBf1J2hoQYjSwScT87ARNpz7ZVS9QAkZb8:7N11CYel7ARNpz7Zk9kx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "bc9d7bc7-bc2d-4f94-a354-5bc14efb0ee2", "value": 74328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "47d41f13-712c-4561-a862-eff0dd08f14c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09301daa-d9a2-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "015fcd16-bc5f-4a2b-a0d3-65ba94d68690", "comment": "Malware payload (Mirai)", "value": "eecd707de119ae12cd228590fdbc2a7f", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "8c604ec0-9637-40b3-912d-bb78f855748c", "comment": "Malware payload (Mirai)", "value": "a3cd67b92655e92950bd384d86968f19f101d7b6aa7013bf47a256db52a7e368", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "4aec5b4e-946b-4679-8dd6-f9cd6d7fa237", "value": "T1A4831986BC819E11C6C51377FE2F108E331267A8E1EE7312CD141FA4778AD6B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "c1e36479-1546-4fdb-88a7-87c00cb44a9e", "value": "1536:dtn4hRfby0yZAui3V/S2I6G+uDRBPOf/VdOU31MorFXBPyQ7IziIpiZTum1/Ay:6RfOBARdtXGHl9k9dO21Mo5xqWTum1/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "dba11ae8-f920-4a70-8780-6471dd67265c", "value": 87344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "3b1165a8-60cf-47d1-b847-e8a1f24cdcc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "386ad30e-d99a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "faa3117a-4592-43d7-b0b5-2fee91b80742", "comment": "Malware payload (Mirai)", "value": "9dda5499579fb9ab061ee7cf4bdfefd6", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "acc1b906-beba-470e-adc0-b1f753966f94", "comment": "Malware payload (Mirai)", "value": "0c6262b1f43837c4f7824825b0209f20436c7799cde823e2ed2c63c1c2fcf786", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "68f8af5f-0603-42a9-965c-d3359e5ec730", "value": "T19193534D3E314F7DFBAC823987B75B209209339626E1C584C1ACFE021E7479A745B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "4d0ca046-6f8a-4a34-97a1-8499d72df689", "value": "1536:jvW+e7A26T90WlWGTd06/+vTf9l36nntYLls9adCnyB:K+eA26TShGTd06WTH36nntYLls9aknyB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "3efe85d2-fc90-470b-a889-de172ad1d66a", "value": 97508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "c62706a2-bb28-4291-9d77-d5197d9769e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1c6a1bb-d999-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "5b7d8c3a-fe10-4f63-a1f0-6ccc90f8e418", "comment": "Malware payload (Mirai)", "value": "93bcc3581458be3a436b3eab7d847118", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826324, "uuid": "dbe75bb5-1da9-487c-8b5f-d9a39f78d502", "comment": "Malware payload (Mirai)", "value": "b466b109c9ce9819e1f6ea5f68f7a75ffa5278ad031c61e72a077171cdf9ee92", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "650fb79e-5d15-4ad0-9557-645c73495e2d", "value": "T1DBA3831ABF605EF3ECAFDC77499A2B45208D141A21897B78BD70D814F64E24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "0188ccc0-f3c3-43be-ac14-4cc84bec4365", "value": "1536:277/BCaYLJcHPasWK20j+QNIxhRQmnDRZNdaney:0LAaYeHlWK2ABaDRJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826324, "uuid": "113f8e45-f965-4662-8de1-cb07ea49c447", "value": 100468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826324, "uuid": "1f5aaff2-1784-422b-819f-090907882dc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5ecde83-d99c-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "41bd3cf1-a05c-4618-8ca8-7eb6938279b2", "comment": "Malware payload (Mirai)", "value": "7840f7652446ba21a0d3d8f544843ddf", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "e410e216-a48a-48e4-b026-0e92c080b819", "comment": "Malware payload (Mirai)", "value": "06127ddfad660b641bbbbb3a1c8ab143be91bcce4aebafb6af071b61dfa7d8cc", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "7a4aee10-3976-4376-9931-278c93114d58", "value": "T161638D76D578ACA0C04889B576A8D9B44703A804A6F77EF1CAC19F59080BEFCF1497", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "1958451f-f230-4a54-a3b6-9dbc2ee92a12", "value": "1536:n/THhka1wt+nxjYraYtfNSmJemJjQQjSY2LC0Ly:nbH+Grx0rnv9emHjSY2LJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826325, "uuid": "c6529c66-1eff-4f1c-9755-3a8a84c19b49", "value": 70648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "1988544b-e3b2-48a3-b8f3-38b8abb3ba7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e7cd41-cdd3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "d50e075f-d8c5-4ce8-95da-7238573ec95d", "comment": "Malware payload (Mirai)", "value": "71f3bc6a44ff8d1fe2b4792280aa2814", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "d62b35d6-0ece-46b8-99dd-5d6578ed307f", "comment": "Malware payload (Mirai)", "value": "39e481b27f1e047f26bee9a5bb2849232c76031589700f46ff6d1c9945917b8d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "c82ebaf9-c6ad-4664-afb8-154781e88b28", "value": "T1CB714CCA1229A27B6D61C79272F781EA70F0E1D1A1D66E07E1C838F6514DD0BA471E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "9d6343b6-2ae2-408c-8074-1900a1b7b0c5", "value": "24:vSObOBSOGOjJSO9nO9HSOfOhSOQON3SOLnOLtSOqO5SOP+OP/SORONSO9wO/SO9J:vsBF6HArgBH7/ufmw7b7Nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826325, "uuid": "23e0bb00-9a46-42fd-bd28-ac09c12d7304", "value": 3552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826325, "uuid": "ef509411-7dd1-4a27-b50a-17d6ccda5e83", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b56abcb8-d99f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "5163edb6-1af1-4de8-a584-89037eb29ba2", "comment": "Malware payload (Mirai)", "value": "0cdb6119f778c00d6834dd430733310f", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "7d01864c-c729-4c6e-8bb4-f3489ecf5cf1", "comment": "Malware payload (Mirai)", "value": "5b12f9deac97c5d3ae7e5cd762603bc8f9cd8011a3ba532912fcf94eb320e7ef", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "396451fd-a18b-4925-a262-e6ca9307ddaa", "value": "T147732714E97D2E2BC0D8A27E12F7CA16F2E5360E10B0862D7D350F8EFB54790A5467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "32eed5f0-309c-4dd3-8e1e-7487adc04206", "value": "1536:jeHRbSR2YQTaL6lJfSF6ZoIk4ct9c8weleYPkAVFDBOwz:MReR7LM6RjcfoPnBOwz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826385, "uuid": "7279bdc1-c399-448c-b4a4-7a2de62d21e6", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "bca94fbe-1efc-48d5-a872-533ca6259bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17b94852-d99a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "4ee3259d-5d1f-48fb-8ff6-4d22cbebc6f5", "comment": "Malware payload (Mirai)", "value": "9b35f9492204f7a0954fc5695d57c15d", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "fc01bd6d-5f01-4cc4-b97f-5d506926e41e", "comment": "Malware payload (Mirai)", "value": "ffd9c36c1e8a981abfa2532e87615674724853cff2ca8a59552582b293b8175e", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "300f21c1-61a6-483e-b863-f8d72b52d5f4", "value": "T14C730786BC40AA16D7C04777FE6F108E3314A7D9E1EA32429C255FA07B8EC2B0D677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "281f174b-7d2e-48cc-95b6-0e48399788c4", "value": "1536:iKt99e9By3CuMDyHMA3OKSXDtuTktGXfU2/h0BcBrMy:iK09By3CscXmktOM2qcBrMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826385, "uuid": "dd7e9a69-d2fe-463c-ba89-ff0650633efb", "value": 76452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "45cb98b4-2e2d-422f-ac18-be46c55ede6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd54c634-d9a5-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "a663827c-087d-41ff-8ae7-0c2e8489ac5f", "comment": "Malware payload (Mirai)", "value": "54955ed9ab2d0c42cf76188fd14a1eff", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "c2bb57be-e577-4655-85bf-07b5eb9ce769", "comment": "Malware payload (Mirai)", "value": "2ffd227d7cdf3781dd0fc458ba176cbf2a6a062328c72ec506a8a1fe1b3792c3", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "96446d61-e6e7-4d24-90f5-a4a1215d88be", "value": "T1CB732A03A98599FDC088E07943BF7276C556B07D233AB1D777C8BF1A6805EA01F1E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "59e0b321-9f0b-4d35-ba7c-2e7b82f86031", "value": "1536:LqO1qNU3qK2iAQDEI3QSzuig2UOXS4gT6Z6ojiQjmbQ:LBqG6K23QDEIgZdOXZgTUqQj6Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826385, "uuid": "2d9282ff-c60e-40f7-aa61-acd9e1d31ae0", "value": 73632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826385, "uuid": "274325f2-f79a-4758-a08e-7bb50987d359", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71dfe923-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826389, "uuid": "d0b19df3-d76d-44b6-807e-8a747916703e", "comment": "Malware payload", "value": "efeca930587b162098d0121673218cdc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826389, "uuid": "af5bd175-d469-46fb-b9b3-c20152191a68", "comment": "Malware payload", "value": "b4448f550fbaec46867c680e96b06176ece5e46bfb691da0c538a6cb0adde23d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826389, "uuid": "dbeb24df-547a-44a0-869a-a96cbd124ecc", "value": "T1F564231835BCD3B1DA43B7713E502A136399E5ACDD931C4EB01A4D26EAA2350DB36F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826389, "uuid": "b5149d89-659d-4038-afc2-45a0cd699ecc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826389, "uuid": "b8e59d33-7975-4540-9368-d6da4a09ede5", "value": "6144:6dk9oVr+AVhWrTd16/7Hknd5KPn6UX3lGR31qGz9cHWo:zeVSvd16/7Hka6wQRlqm98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826389, "uuid": "45d43a43-9ce0-4cc7-b450-b0b8cbc2cf59", "value": 313344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826389, "uuid": "124d44c4-6d06-4d53-8606-8e3dedd9a342", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6e694a5-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737826505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "2b3abcbb-2520-4eaa-8b38-7d82da517a59", "comment": "Malware payload (Mirai)", "value": "2b26df4917fc623af81b73ca389f0fce", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "c01cf145-a401-4e37-969f-309c4992a21e", "comment": "Malware payload (Mirai)", "value": "ce8d8f245b73a552b5ad5d06d232145c76a29fef26172df984c49f8986b065aa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "d3fc5ca7-a350-4a43-89d2-db0bf15858f8", "value": "T18351D08582844C782967EA17FAB64328B48190D31CF9FF9D9DC8BAF90E4FC16B5417", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "93c6bf94-ee19-4701-87ec-f51f9f0e989c", "value": "48:vU7x7N7hUq6GUgyzPUaKWUQoUU7Q7o7UUfr3bUB9RUccgUVpVUySOUW+CU7fTUDG:vU7x7N7hUq6GUgyzPUaKWUQoUU7Q7o7A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826505, "uuid": "8be3c8ed-17e8-4315-9cba-a55a2d36c6a9", "value": 3000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "3c41955b-ddae-46f2-9a15-614178520c81", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ff9836-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "cdf8968f-168c-49e1-a6f4-e057241c4af7", "comment": "Malware payload", "value": "55c62b4936fbad555f0d287a2df73518", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "797d1c22-0bbb-4da8-a80a-ade8a2a4faf1", "comment": "Malware payload", "value": "38d2454e765f59dbbcf9ff44bc0654fe277073f1d85aa9657fbb37559519b2df", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "dd19e720-45ae-4349-ab28-3a11a21b8405", "value": "T17B41123F300922286072AAF96A145FD2D64B419F6A2DE3C13D9ED4C14F9A550C3B13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "4f33b878-b0e6-4007-a270-abc26e3d8655", "value": "48:bOQjkPClFli1Fz2UbWuusweA+TPimjarSlJRou6jCEHh30L1Yas2EOTOyLRszEqN:SQjUClq19b0+jaun1LOELyObTOphH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826505, "uuid": "55f4f2d3-f56f-4939-97d2-5449507139d1", "value": 2283, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826505, "uuid": "d8ee330b-8d9c-42b7-b0d7-db5a71fadd7c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7aaf2a9-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "228f4c35-c56d-44c2-844d-e28672fa648a", "comment": "Malware payload", "value": "0699b3bfb47fc2f819fc8097fb29daea", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "fc81ee71-0227-4632-b405-00d6c24e28bf", "comment": "Malware payload", "value": "8016c2ec7c06015b112c3b467befe1c4488a7c4fb382d8f1a077afa485c7e743", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "b9631db0-ebe5-4821-af93-40c65bdc198d", "value": "T1B602AF50D8AED139FBEF2478385A55104D2233BD94CCE3BD8C9254C8F0676352E16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "11d38d6f-df7a-40a9-8df7-13218984128b", "value": "192:+dPKZZVgxO466ahTHBxuPcth2AXowtq/0MD8uyilHYKIKnYKWvuN:gSHL6aNHBxuTAY8K3DuE49iSuN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826506, "uuid": "caa9a17e-d2d5-456b-9eda-30f5c07701ab", "value": 8968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "a1339b74-8bce-4ae1-bbc1-d673859ddd5a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7abd1ad-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1737826506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "154747ec-d778-4381-a3f5-0878d23cdaa3", "comment": "Malware payload (PureCrypter)", "value": "d51807a8c93634b39cce7611535167cf", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "0ccd2c79-a4e8-4174-83ed-4a38ed846897", "comment": "Malware payload (PureCrypter)", "value": "ff2928f7e00c034f5d441f7b7444a8af961795f41c7a06e3fc7a6fbc9275f8ee", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "5a75e382-6ad0-4fa1-8967-c98b85ffb789", "value": "T1E455239BB88183B0CB6A5B33C095C92012B8E4C57753D34B7C4B674D6A63FFD99819", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "3c24015b-35ee-4912-a535-90add853c0f0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "aebd01c4-3b3a-4478-9a5a-d6f6190c1121", "value": "24576:MAUt87FX0EXQEl8b931yAtABgyyYMWGFEfm3lJvczRfNxLX1CY7/wjiayIPDJ:MAI8RPQEliFL0Cg+kzZX5/w2wP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826506, "uuid": "32302638-bd3f-4935-81bd-52975ce7800b", "value": 1387008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826506, "uuid": "57e96595-c958-4997-8638-bed448c439dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b821f1d5-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "3351d583-235a-445c-8b5b-0637afd73a29", "comment": "Malware payload", "value": "e212d4392ca2af0efdcf86286025799f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "d4929ef2-b207-4aaf-acc7-363989ddb816", "comment": "Malware payload", "value": "6ab2d607ae89b8744a857a903790540ef977a823c289bbd517284cecccff31fc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "e9473e14-ddba-46d0-81cf-bb33eca3bb3c", "value": "T16F8423595FB2344DF918026D2629A5FF5B9368782C62122147E3F14332FE5393AE34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "07ca8f74-562e-4008-8487-a8327c458327", "value": "6144:2T/nuArxNJaDDvgRi/SRJ0y98UHjsTojPWXRQN5Wty1QChHgOnsvk:olrvJaXXSRJ0y98UH9PMRQytmV1nsvk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826507, "uuid": "a8e48f70-d370-434e-9d49-c7c6323adfd0", "value": 371104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "44301e54-470b-4269-bef1-e61ede22b7f3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8223d6c-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "6c74f883-e1d1-4438-b717-b1985791088b", "comment": "Malware payload", "value": "f5baf074f695c5ce0f819be62dba943e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "71de6c04-405e-48bb-b55e-32fb39ccfb87", "comment": "Malware payload", "value": "635ad6759f4cfd7ea0b8f111d2398f3c6ff67514044e620d451f9092c78e20bd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "55be9426-a81f-4a83-a6ff-2fc28342de05", "value": "T11084231731E3B18F48A4519B32B323B92E207A32159C7F6552E6661D95FF62A30B13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "b2bedcf2-daf5-4f1e-815c-2077a2ba7c24", "value": "6144:sT/nuATp9NJaZ09endjOiUyigik8xbZkI2t75IjPAVioeIEezM60nfccMqJ8fk+9:ulTFJaZ0UZUoikIZwNCPAARnQN9ksk+9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826507, "uuid": "13e04bc9-72f9-41aa-93ac-bf23250a31fc", "value": 371145, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "5665bf2c-e6a5-4234-8a38-b8fb0099c3a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b84b065f-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "518f12d8-ced0-4478-b1e5-81cbbe03809b", "comment": "Malware payload", "value": "2d703598ca9edc33ff1471051a565d60", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "78c07940-1c3c-4571-b74b-9f858306442c", "comment": "Malware payload", "value": "06a6d7b917f0c7dc4fad3c0b4c8d931151bd75467099985fdbb1430af4a64138", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "987d8046-2cff-49e3-b471-561e7478fc85", "value": "T13BF5332DE4397969383794E3606190271F168878F106E622FCEF773A7A35D9B1817B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "0d6eca57-214b-4865-99dc-cc04d7995c2a", "value": "98304:Lle+DjkwgvRSPUDkd/WGkoz+opPZlUBYAdWmjgV:LldDjkHRSPUgd/WGkpwbUB4YgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826507, "uuid": "956e4b40-5693-4dec-a3c1-a18ca2b4ef6e", "value": 3569062, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "1af7e485-15c5-4869-aa96-3792e12b8f5b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b85a8f35-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "6fec830a-cd26-4c4e-946f-97e9cf6fd901", "comment": "Malware payload", "value": "59533864768bba5a0bf22156e5a5153d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "84619001-a47c-4cd9-8d5a-6261229c4cc2", "comment": "Malware payload", "value": "245e8da33aa383d95d27a254bffa3008f19d666dc5008d2d862158cc8b68d7a4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "ea1bfb70-f551-4b74-b197-fb49733f157f", "value": "T1819533B9B6499626AB433222CDA174EBE71FFBC6AD1B6D0B113788D473C10311782E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "986ace62-fc95-48f5-8dc1-da90408c5c5d", "value": "24576:mghCDX9K74TJOjo3Hoas33du3Bvo2nhqqGCWe31wxPvlAmM8X4yrGFk+1pHystXh:TMDXJWyIxAxg/TQODMIKkNsFfJoorao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826507, "uuid": "d98e9d80-a0ac-43ae-95f9-6498bb946507", "value": 1941984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "79fb5d9c-8008-46db-8ec0-fade131d6fd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8623eeb-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "a070fcee-0588-45d3-8110-e948b85c38d7", "comment": "Malware payload", "value": "881a0143ed96f23f2a81cac8b7abc819", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "7b6231d0-eb35-4023-b0d7-b5c356bf2f06", "comment": "Malware payload", "value": "e3772001a068c99aeeadd34f941a4db15b5af68f4976465239a496a7e440ed18", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "66937f1d-10c6-4585-8a3b-998d0081e513", "value": "T1C08423495F72354CF91C025C266AA5BF6BA3A8782C61152143F7F54332FD5393AE30", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "9e34544b-8863-4012-bf68-f52af30fce1d", "value": "6144:bT/nuArxNJaDDvgRi/SRJ0y98UHjsTojPWXRQN5Wty1QChHgOnsvj:flrvJaXXSRJ0y98UH9PMRQytmV1nsvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826507, "uuid": "b06c7cbc-5c27-44f1-83f2-4dba3416d6e5", "value": 371103, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826507, "uuid": "c1d8e200-223e-4ba1-9af0-8eccd85ae703", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8db1430-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "e3ea4497-fab4-4d1e-9aec-90ed6383b4d2", "comment": "Malware payload", "value": "06883a395993dbbe739bf1193be613b3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "626ca931-b371-4eca-b674-6072207d13be", "comment": "Malware payload", "value": "15ae3440ac5106ad668476ac2b6e5cd4b5a7547749993af1d8b23553b5f898a9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "ce9f2e0b-ebd6-4159-bcf4-92a75fd6d396", "value": "T13684231731B3B69F48B4519A31B323B92E307A3215DC2B6542F2561D95FF62D30A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "89c87b5c-a4b4-4e26-b124-3aff9282dcb1", "value": "6144:fT/nuATp9NJaZ09endjOiUyigik8xbZkI2t75IjPAVioeIEezM60nfccMqJ8fk+k:zlTFJaZ0UZUoikIZwNCPAARnQN9ksk+k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826508, "uuid": "757ce682-8624-4076-8e69-2714980ec736", "value": 371118, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "450f05ac-8430-493a-b037-83ef42e393c2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9019273-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "6b691d55-b1fe-46b2-b06e-b7d4868d2c4a", "comment": "Malware payload", "value": "17fe5bc53b44582d864c86939f4e05aa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "3f1a18d9-1e8c-493a-85e0-ec84f19c12e9", "comment": "Malware payload", "value": "51e0d46d9fccc65de69ac29cc627124d42508861a80c043c7cb25ee53145f6dd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "d1c683b4-8612-4eb6-b55b-630ee45a93d8", "value": "T165961997B8924943C4E83637F8BE81C432A70EB99B9752665D04FE383EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "a3ddf8ee-035a-4b1b-9c83-5002374a970e", "value": "98304:noBBBqXbvHGtdIT2ml8ULw20i7f6VVEl4S4:oBBBqXzGq8UX2GF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826508, "uuid": "8c6d8747-add3-4bb9-90be-c12040cb8a0b", "value": 9044120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826508, "uuid": "beda6c77-c730-4a55-94be-acaf7fab57e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b904ec54-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "b008edda-6cf5-4f36-bf19-a06f5f561c29", "comment": "Malware payload", "value": "86aa6dd41cca7f1287de0bc2be8e6448", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "994b6a82-9616-49b3-b31e-227c4f71234f", "comment": "Malware payload", "value": "8506640398c2f514d8e364996f9e6b9e683bb2e3e915dd4bd0bbd4cff2cb34ed", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "9ad37d8d-73dc-4f69-bdfd-533bbf80d8de", "value": "T1CB960997B8924953C4E43676B8BE80C832A31EB99B97526B5D04FE3C3EBE1D90D347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "e275b70c-dd73-4595-a0cc-555a65630cd5", "value": "49152:BrtO+QexOQXmR64a5jVR0YwJkNH/6J58vur7q+/1Hq6hP4wq4g:BryexOhHwVRJ/6X/5tpS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826509, "uuid": "b58490a1-b5a3-49ee-b59a-e340498f471d", "value": 8978584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "a49924d9-153f-4e11-ba76-8069b80f8cb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9401f4d-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "0f3fd92f-2573-4103-adfc-ad886e5cb14c", "comment": "Malware payload", "value": "238f5312531ce900bf35dc1ce3095e80", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "dde9de41-1da5-4ec2-a94e-88999fd83632", "comment": "Malware payload", "value": "9c314638a5037c80bed6b5875633a06afa6e0e945d3f658654355efe3aa03bb6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "7e31d9b4-7283-4d61-bebc-431d9c9d8261", "value": "T195F5334DA07648A9304360F3E5BA1929B98FB7F380A707FDCE5D06CA5C2B46116BF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "37c06b3a-0812-4f91-b861-bf5b8b10eaf6", "value": "98304:Ps/mn+6pnhYKtb+yECEljH9uN9DfQAXZobhrgFrr/L2:PT+6NhYcvEhT9uTf9XZobKrrL2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826509, "uuid": "0cb58a80-87be-402e-a617-fc89bc5a6a9d", "value": 3552311, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826509, "uuid": "ab4b5c98-c37c-4233-ba13-8752ccc74e0f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7d5a59-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "75fd5294-88cf-4a4e-babe-65322d1cb28a", "comment": "Malware payload", "value": "253a26f655aa27a98de9e93174c12c17", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "f1b85a37-5b6e-43b4-8721-7d56ccee6b66", "comment": "Malware payload", "value": "c5a79acd527550db7d3df0d3777478c47d309a36b7d764e7b9c4958765174f9b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "a2e735cd-927b-4fa3-be23-594711c56922", "value": "T1409533BBC5BA9CD99F61F25934E913CACD4C1A74A2AC2C5A0D4EEDC3B47257C0290F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "f5410ed8-08f3-4963-9739-8b6251f78da3", "value": "49152:diysVGVVfW0HVgp7ctaZXZ+7XVHrvABrGIQ3bx7nq9:diM+0qZGab+7hrmqIQx4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826511, "uuid": "34d289f6-6c53-4f8a-8de2-e0f85ba9c124", "value": 1924948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "614c784f-7ac1-4322-9490-be26b97ec5a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bac4b1e0-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737826511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "5cb988a8-af86-48e5-b6cc-7122d8953c26", "comment": "Malware payload", "value": "0397c0c9d41b2804d764ab4e104a3ee5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "7b28df30-a3f2-42d5-ae37-ff4642561b77", "comment": "Malware payload", "value": "a8fb65222e979dbc9bb218a831a9b1b8bc49c2f01dfd525badb19ebb5585de80", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "47f596eb-4e1f-4ed9-8119-db4131f038a0", "value": "T162C533073B261DD43FB1B4BAF05129B285EF9966817A81CE37AC1DA9F825D073530B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "68470c1f-1365-4b55-aa00-bbd89c01af92", "value": "49152:v7zvMPOJ6hfPIHZ1kSvs4G1QiyQ9vFeNtFJMNRi:DTMWRASvJIQiPhNk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737826511, "uuid": "a138f997-b8f8-44e4-a550-6e179907ba61", "value": 2662176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826511, "uuid": "0da90c40-5204-4057-a28c-194d24ddf0f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0d4f047-db46-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737828266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828266, "uuid": "0994ff5b-718c-4ae1-89bd-f860e97afd2d", "comment": "Malware payload", "value": "021536bf571430d6e58d25d203d21a33", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828266, "uuid": "273fbb11-e374-4c41-871d-183e9dfeae8d", "comment": "Malware payload", "value": "c6819ea72e858c4b96eec5a568c8334d65d4a381c0c5514c7f08e400d7a9f6d7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828266, "uuid": "3813c070-a6ee-4a25-8758-21065b789134", "value": "T170534B53A2D90071E032EFB5DE2A8494957BBDB11E3AE44F32D94A0D8D68BC1D90E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828266, "uuid": "ad4e2430-dd99-4a33-8682-8e038cdf999f", "value": "1536:CnPIbiThZjV8pvbGzUtiB/3gS4AEkXTMG9z2gPrEdpglV55uhuaP:CnPIbiThZjqpn0vb4LWXPrEdpg355uhL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737828266, "uuid": "f75a44fb-fb2f-4cb0-9893-1069062d804a", "value": 62128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828266, "uuid": "2f091a30-8c5a-4aed-83f3-13936e432e25", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84794635-db47-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1737828568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828568, "uuid": "37f572ae-8e17-4d51-b788-e365d859519a", "comment": "Malware payload (Stealc)", "value": "047f15cf4dedd3b0f48b0bbf9ae44f32", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828568, "uuid": "3da65429-462c-44ec-8394-c31c6e1289a4", "comment": "Malware payload (Stealc)", "value": "36cccd10c2c71806b6f2019faff218649321a33a1e5ad7d8b916a3ef747f02fc", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828568, "uuid": "6e417d2d-46ee-49c0-8c03-26933ab924a5", "value": "T1DA8533916E8B6264E8EF94F0B5AE8BB12172FDC3453F142DDB19B25CA27BD00F9850", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828568, "uuid": "c11a87aa-a161-48ff-b800-a472924b2d1e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828568, "uuid": "8e1604e1-496c-478c-b7aa-7b96b078f315", "value": "49152:vzXnfBkyoEqyUm/wEd9u92l4WYQjfE/UTUd73n3xju:jfBSEKm/vdM9BQTjUd73nk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737828568, "uuid": "7f1417f5-27a1-496a-81ab-68dd04318ff5", "value": 1821184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828568, "uuid": "cbb3db2f-db64-456b-bbce-a7cd0ec8f385", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2815869-db47-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737828645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828645, "uuid": "a9ebae84-ccfb-4967-9fbe-04bb086314c5", "comment": "Malware payload", "value": "3e61eaa78a2539c32fb2f319e6e34bc8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828645, "uuid": "f030604f-73da-49e0-b97d-b14bb7cbf521", "comment": "Malware payload", "value": "a9337e498ee00860698ad5852e3620862cc9fa0378b819814447047f1806b395", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828645, "uuid": "96c248a4-f76e-4936-a1ab-b9ec31d86edc", "value": "T12C853341CA129A54F79121F012FD5CA773C179FA9CAA94B0C5E022CF27ED89DC7E50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828645, "uuid": "ed560005-b442-4bd7-901a-e6e26794243d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828645, "uuid": "fb16a000-a5fe-4593-84c4-8d88156b50ab", "value": "49152:3WnK4BfUbxr8rkruCbVPDRALo8mDbg7EVAIQ8TtmM:yUWyuCJDWmbgI9tm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737828645, "uuid": "2276a29b-d7fe-469b-b920-2c5205dad2b8", "value": 1873920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828645, "uuid": "7a275a0f-d707-46e1-9bd0-52290ef79beb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "680a0139-db48-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737829251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829251, "uuid": "2627a556-dd48-496e-b806-74b228c5c807", "comment": "Malware payload", "value": "6759e37b0d9584593b317ec044c6559e", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829251, "uuid": "fe093cf2-e88d-4d24-9dfb-73418a38ca70", "comment": "Malware payload", "value": "a71f6d7cec61f58e7d3dd4ef795ca319afbcb77ae0ea95065b07024f778cb035", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829251, "uuid": "9ba8c0fe-4794-4006-85c6-26ff9a80f231", "value": "T14B4533B27B6DEBCEEDD260B875762305CD6E3D9F0E28114A40D39131985A520E6BD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829251, "uuid": "6aea4ebf-e72f-418c-9417-86c831f7f45b", "value": "24576:NvxoMXkj0vtQaMlZbkg1jGwz8RIZzJWO0WYxHmKaE9FKwtYO8:7Tv3GbkQjGwnZ1WUpR6Hn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737829251, "uuid": "854f843c-48ff-45d5-931e-ee4b66628d8e", "value": 1252978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829251, "uuid": "18919724-267e-452c-ae46-c294dddea13d", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca0369b-2ca5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1737829291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829291, "uuid": "1be4d33c-8eda-4c72-b57a-8d984055f35e", "comment": "Malware payload", "value": "9ecd176f0a8171f18ccb71fa7f137843", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "help.scr", "colour": "#7fe84f", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "TellYouThePass", "colour": "#0e3afa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829291, "uuid": "46448d7f-67b4-4662-aa9d-be3ce46824d4", "comment": "Malware payload", "value": "7feae24e6500bddc84a540bce8f6ef4a148eda3095945e500e5987bab28d39ae", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "help.scr", "colour": "#7fe84f", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "TellYouThePass", "colour": "#0e3afa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829291, "uuid": "15ee9cd8-6313-4988-b71b-d23fa74335d8", "value": "T14234D901B8809135FDB305B7CEFE2A6DE66CAA61135970D3E3D81D595BA1AF33A311", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829291, "uuid": "255feeab-b2eb-4251-a5da-b86bb17724b8", "value": "6144:nfLSRRXUbWdNePcDS5V9tZw4MWR30VGZsyKuKdZlPOwTfwGtZ3m4:nfrkedCmm/tZ37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737829291, "uuid": "a9016b5d-0cf6-4c5d-a650-e5d7f8c59c95", "value": 248000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829291, "uuid": "082c60df-16c6-43ba-a5d6-a714980c0fec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34539e51-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737829722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829722, "uuid": "b3f03e53-8e21-481d-8e1d-56638560cca5", "comment": "Malware payload", "value": "67d53c873fb2c5f1e526de4d27b5cc70", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829722, "uuid": "f709f7d9-fea8-406d-aafb-cf8ae71c909e", "comment": "Malware payload", "value": "6b0bcb90f80a91af7deb8011e67ba1a3d51deffc3802051c422133b5b0281151", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829722, "uuid": "8870c995-b101-4934-af33-0f1a9bfc6b89", "value": "T1C251829A771743301E66A4E3B9E9186CB3D6B5E6D4CCCED64BC8B4AD844DF0CA1805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829722, "uuid": "d653689f-976a-482f-b295-1f42a54104d7", "value": "24:vCzIUPCiPzzPC575wsPCn8ByPCIRDlPCX7XwCPCubXPCiPlPCFmoPC5ix+PCoxN/:vKf2dbip4DL2s1XH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737829722, "uuid": "c072f530-cf01-4796-88ea-63405f7e7fd3", "value": 2594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829722, "uuid": "94469708-d56f-49e0-a46d-b9d221addbba", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e269430-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737830087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830087, "uuid": "81e072c5-af8d-4dff-bb1b-1ce7025ac17d", "comment": "Malware payload", "value": "4fc82a046d406d4e4799444c09bad11e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830087, "uuid": "fdcbce23-cb18-48fd-9d6f-a68636993323", "comment": "Malware payload", "value": "8bcb3a92302b2ef259966ab431c76abb74ce4752a5c9d9e12201eaa6504a7d35", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830087, "uuid": "6efff8d8-b4e4-4bd6-a4b7-b7356698e382", "value": "T1C11522D6D5801ACEE0296F74C0779CB9493B6FE83C36F8098C5939279D7398B3498D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830087, "uuid": "0cac36f5-c8dc-4eb5-b546-71819be70c4c", "value": "850ff6a228bdb9bec1bc8e49dd1db0fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830087, "uuid": "2f5133df-5e6c-4b72-bf6a-6ddba5298405", "value": "24576:F3BHYnYSKGlDTmLjSfWO4wGOhl+U5dUV:HHYnYSFNTu1O4q+UDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737830087, "uuid": "aa58cf2d-c81d-476b-9867-29f1ea782b4b", "value": 925184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830087, "uuid": "2f9b11ce-83a3-40fe-97ce-cb6f9bf60ec0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf6252e8-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737830939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830939, "uuid": "a9f57a5c-eb6b-4484-8d3d-6d68907a42fb", "comment": "Malware payload", "value": "a93620293229cd38b8daff04519cfa64", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830939, "uuid": "10d6075f-1afb-43ad-9758-823cdb07f3d9", "comment": "Malware payload", "value": "d60496f04e3ef5df13630fd5cc6ff8329e9ee88e7ca1269f8dad341dd0da994b", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830939, "uuid": "56663bab-1468-486b-ab19-45df79ee5e21", "value": "T132453372765C29C9FDC344FC12FB22098D1D2D9FAF7A604F40B3826259D9D34A129A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830939, "uuid": "80dc9fcf-c186-47db-9fab-573831b2cc80", "value": "24576:1ECL3eMOIj2jJmTUrlbkYPjiS/ExYTFpKOEw43zMdtKAuqbv4o1mm4Pya2:aCxMbkgjiSVTbQ3zjX8weh4Pyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737830939, "uuid": "e6c407c0-24f7-4cd9-9731-4c26f3f39ee3", "value": 1237804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830939, "uuid": "050d89da-b9b8-48ae-9521-f186115c8535", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1737831544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831544, "uuid": "85aee8a6-aed1-478b-8d9f-190c17b881c0", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831544, "uuid": "82b079d6-b964-4905-bcba-a6508d3c9b9d", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831544, "uuid": "de57e32d-9b9b-4a31-bcda-6f575cfc17ff", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831544, "uuid": "cc56d18e-6ff8-46c2-911d-faae01e4502b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737831544, "uuid": "f47d2901-a6ce-479d-bd9a-7523684def05", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831544, "uuid": "4bffd231-8790-4227-b021-5eb9b5f39a29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb4c0f1-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737831964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "38d16e9c-f918-4e9e-b437-45bd2c27920f", "comment": "Malware payload (Mirai)", "value": "3d054fb558d3e7ea9d1d59279a1b8f22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "4ba691c6-a83a-4cb3-93b5-3e9489da4f86", "comment": "Malware payload (Mirai)", "value": "9db610a1a9f41e8eee84bc40739789b2f3986d860a12064ba6f05b4ef5303331", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "563d07f6-14b1-43c3-aff9-95225aea59f3", "value": "T17AA2D029E345AEF4DFAF9C9092C1C2C277F547C6278AC8E340EEAF013506056B789D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "740f4e9b-faca-4edb-bc70-78e8458f67b2", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5ATLM4uVcqgw05VxJz:mRxsSVsMD6xiJJE5zRWNk44uVcqgw09N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737831964, "uuid": "8c302269-18ca-42bb-b9f3-c97abfa4b5b6", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "95030de7-de4f-4586-8b2d-4f58a0f4f08a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cbb18e9-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737831964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "844d6b2d-9786-4c56-befe-f8c6324f8d12", "comment": "Malware payload (Mirai)", "value": "8fa7c8951bae50c837a3b56a5b7a4a79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "4a1e4a00-326f-4c5f-a3c0-ccfe8edfe9ed", "comment": "Malware payload (Mirai)", "value": "b2e23a7a917ad138a9ecac2f67eb7271c689e235757eaa3a0bfccb6c9906bb12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "2460eee9-afe7-496d-9360-bb1dee8d8824", "value": "T1F7B2C0DC61543484C98D7C7D2B8D4A664F6CA190BAED8B25E350CDD4B3BEA4B345D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "1ec18f6b-0649-421f-b106-19042e9d051b", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp4zpZqSWvFX:4QlS07FUXqIYSXQKqugqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737831964, "uuid": "20af5e5b-6779-45e4-8599-d45e2936426e", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831964, "uuid": "191d03c8-bf54-4918-9d6e-057203f49b20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d943106-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737831965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "4267ed65-d544-4d92-9650-fbd48f77d073", "comment": "Malware payload (Mirai)", "value": "6753ff1005cbf935a157f164dde44287", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "12672f9e-327b-4226-91aa-4cea35b776a3", "comment": "Malware payload (Mirai)", "value": "478a90d3e840d13ec54602d091a0def7614833865dcce67df97cdba0f9effe37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "9f175870-f045-472e-bdc8-679cf0b9f977", "value": "T16AB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "5286195a-98aa-4ed6-8cb4-e13a33c8c616", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1E/LWy:c9sSyzz36YaWWgg1Eq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737831965, "uuid": "0c4f150e-a20d-4a7a-9806-f82399628227", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "b5a455ec-c055-445e-a099-ebc673fa08d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d9520c7-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737831965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "4b6fdd5d-e576-4e88-bb55-d80fc872dec3", "comment": "Malware payload (Mirai)", "value": "bef196cc99ba5a94896eb98346875302", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "317598d4-12a0-4a91-a411-1caa6d62f64a", "comment": "Malware payload (Mirai)", "value": "0815f210cf813284f450133c4102ec9b22a86193f9f48e0cc4741dce70cc96f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "e76e005d-2229-4d41-afc8-d499ce70b8b9", "value": "T1F2432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "7f82622e-dab1-40b3-9653-3b4e46423a87", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAw1:RqtmZPuutfbltZFBSJsBcfDSTFI+BE1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737831965, "uuid": "93e6863c-2f11-4d2d-a6c1-aaf06a1c6c44", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831965, "uuid": "81f319d4-7f95-4f28-a37c-da9c6080d2fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9141adff-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "92d692bf-8e73-4218-8c5a-c4c85987d623", "comment": "Malware payload (Mirai)", "value": "fa8aff9f423ae0483df66f51bf5851bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "0c9d09fb-dbda-4e5c-892a-0a5e4fcb2826", "comment": "Malware payload (Mirai)", "value": "8e747de6c42589a2ecffddd2ccb7284d37f5fb75609ead101aa7836bdd634483", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "b9bcbb4e-1124-487c-bfbe-6bff77b7eb29", "value": "T1C4A2E01562632D56F2EC2C3CC9AA8357F9671BFCD0F6337679441620C90924B3E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "5d103619-e8a8-4449-8781-fec3b26d1268", "value": "384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjqTshymdGUop5hO:UvQn4j+ZO5fKAlxGQs3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832025, "uuid": "b19ccb5c-49fa-41d2-a9ea-21faa8cc3670", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "a05931af-3eda-4348-9c8b-53e7227a5ace", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914347cf-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "367654ab-6348-4ac6-8c16-55c384e479f6", "comment": "Malware payload (Mirai)", "value": "371a8089f0d9b997dede00d908f2d729", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "2601949d-4389-4bb4-a4e1-8574601b3024", "comment": "Malware payload (Mirai)", "value": "02062dff2765a4d772fa31daea8de2db65ea363cebf6662fda7426fe56c93a2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "9a28d5c6-09ce-4a27-8d09-a08affee3e24", "value": "T133A2E045BF2C828BC832293554D9EAE22252FC62F3EDCC492640C16FF5733A96474F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "f8aac9cf-369e-4f90-be12-e63554f5f367", "value": "384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaHhib+502F2vwA9dWuMW21bAK1oTm:k98o08kxofBE+ZkXaEbp2F2TWul0c5Qv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832025, "uuid": "4f420bb2-653e-44a5-98f8-cac644c13bf7", "value": 21492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "a8b48bd1-9c45-4934-96ac-2f26cc1e1779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9145aa9b-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "110a9d51-79ba-4faf-8ab3-d4080f881c0e", "comment": "Malware payload (Mirai)", "value": "f238b50fab82b72ec942240ea21e4b63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "eed256f5-b804-4abb-a5e2-6c3fcd8327b2", "comment": "Malware payload (Mirai)", "value": "a12495b9df7c33ea0cfe8c10debd69be647203b3e7a5fe8fbdf2ed5c4ee0e0a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "c23d4c1d-2219-42c9-82b8-86edb7b3dc28", "value": "T153B2DF3C1B150B98DA1EC0BD839D0B603DB81B3591829D4B6217EDD7AF9A8B47453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "f6f64e20-c74a-4af8-be28-8de4d71acc62", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuilmdtJgGlzDpH7uNj1JA41:YeD8ZSWvZHZbs1row697qohQvg9litJ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832025, "uuid": "aef10752-da91-40e0-8f7f-2e4d2c8571dc", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "220ff87d-0d20-4543-8be3-6ffba97f9621", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91483cb8-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "02226418-df9a-4aae-896e-eaa429c666f7", "comment": "Malware payload (Mirai)", "value": "f60d756342f345ba5911bd12383026f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "0ee68a91-0a23-4425-b06d-551dcec3a74b", "comment": "Malware payload (Mirai)", "value": "78004892ebb112bc5af05b1700ed53223520c63f4b2871a985e9cb4084ae059d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "130103c5-c5e4-48c7-9ded-37e2a88944fa", "value": "T13782CF3011AB74E9CBE14431EAAE8EC69B160BB8D1FC32931658AB78894500661F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "c63226e9-867e-4623-badf-a2b363f3196b", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaOhymdGUop5h5l5:2dV0P6+kom0tVAoNvm+to1Os3Uoznl5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832025, "uuid": "6d6be8e3-8a21-4583-80b0-403c916fe922", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "ad80d9fa-7a42-4a94-956e-d57780fb845a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914ef6bc-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "112b647a-ea11-4c62-ac09-5dde8bef0895", "comment": "Malware payload (Mirai)", "value": "1b139e656dd971deaf01a69d2f14b2a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "700f9fcc-4b58-4074-9e01-0bd272f9f791", "comment": "Malware payload (Mirai)", "value": "38808bc1ff1c8455e53b752015d3084593d0e368f481b3a63e71f4ca35edfbaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "5def4cd8-7f9b-442c-89c6-42b7cc9f487b", "value": "T192330A8EB8029D3CF91BE6BE54164E0DBA3177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "2adad43c-faeb-47e6-a0a6-683bcad8eb26", "value": "768:gduPBFnHooqR8qOCKq2cH4Y3e+TK806MMUVjzMfQXOtHud2oG1:r/hqaJM53eqK806MHdMfQXoHuC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832025, "uuid": "82a97ca4-6443-4d21-b72d-6e60bd579db9", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832025, "uuid": "b7bf9390-cb21-49cf-bbf6-90d0a6d21488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b43053b1-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "2fc9e6be-8430-4eab-a154-b569add5e189", "comment": "Malware payload (Mirai)", "value": "45fde5a957250b65042006803e0de052", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "14e8ced4-19ee-4415-83ef-a4481d93e3a3", "comment": "Malware payload (Mirai)", "value": "bb8832e988dff2511cfabca40a184f33b211dd4c82e9ea1844fe7f4115883c28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "85a9c0b4-09c4-4d32-9ce3-1de27780ee4c", "value": "T180C2D0A0B726FE31C4206C3DE53A4C897A51067C91FE383764258C399EC165B67B88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "8a411940-1619-4484-acd4-55b5e289e89e", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwr6e9q3UELuh:OKy4qfqoeJdXWgmLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832084, "uuid": "40b8848e-cbaf-44c0-ba9d-83827e6d2bf9", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "d7282c81-435e-4bfe-bca1-416b28009b46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47441c0-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1737832084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "4338fe52-8356-44c2-9e42-225cdf704d8c", "comment": "Malware payload (Mirai)", "value": "c636a256fd9c9199f0cd4d36c40ffeac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "a6c60ba4-b3e9-4960-b5b8-5e7a01944a2d", "comment": "Malware payload (Mirai)", "value": "5c7286fbba3d8ed9a2a9d2df796245c8e9e05b98ab0c87eea8f226a404f69686", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "8f09e2de-d33d-4555-971d-7d71db2afe1d", "value": "T1A3336B36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "29d45543-cfff-46e2-903f-71da2d32b9d6", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832084, "uuid": "fde28438-e12b-48e3-b06c-a2123bff3bc8", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832084, "uuid": "ffe7dd5f-6ac9-47a2-812e-727aca98a7c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5730ba9-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737832769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832769, "uuid": "13871ec1-602b-4a00-a7c6-bf963062db67", "comment": "Malware payload (Healer)", "value": "a4db961a782522e3a4f4f360e8b48f78", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832769, "uuid": "c657b037-62cf-496a-8109-0baed74018fa", "comment": "Malware payload (Healer)", "value": "8f093dd37551fc31599f0a60811c52e15aacf2d0b5b3d10b6f2ce0b629abeab0", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832769, "uuid": "dc479f72-4c54-4b8f-bd88-e94b862563d0", "value": "T152D539A2B919B2CFF48A2774D467CD825D6D03F9072148D3E86C78BA7E63DC115B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832769, "uuid": "cd90b480-8305-4291-a92b-61bb0cee2c38", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832769, "uuid": "8c10b396-7d61-4b4c-b278-2952ecb0bb22", "value": "49152:zNCNIaddv9mx6L6v4oBOVj5qsU+ffTPXnFWlROy8UyqrJ:zN3addvgxY6v4KOl5qt+zPXFU8UyqrJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832769, "uuid": "61c9beb0-eeea-484b-b1b7-96563524326a", "value": 2854912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832769, "uuid": "3e9e9156-38df-4d10-b894-c2879f9eb66b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8e4fcbd-db51-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1737832924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832924, "uuid": "3bb66586-c70a-45be-9c9c-71ac14d22295", "comment": "Malware payload (Vidar)", "value": "e7c964e5bd52da0b4ff1e6543608cf27", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832924, "uuid": "88a9cbea-4c24-44b8-98ad-44c171c85c64", "comment": "Malware payload (Vidar)", "value": "33cab7cd9069c761a907a2498c2d496da5e9332412b13472710e774ca80c4b48", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832924, "uuid": "845f4b82-b96e-4728-9325-181bb2a841ac", "value": "T1661523A187DC8436F7120EB2B0A4959A6D7278940CB0CBCF630ED9CD3A87F815D75B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832924, "uuid": "f57fec95-7545-4968-90cf-1854c6e6192b", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832924, "uuid": "3a458456-19f5-4932-85a0-325217d9f900", "value": "12288:gCxr3SAoHl8uj7c8BNV0CW9TBBMtVIN+9exmPh0LguCifyV03qGs7ifbVpBgYeSa:gcrCAY8uj7nGPFLWVIN+9e5iUDTq/Shk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832924, "uuid": "86eae011-be04-49b3-a8a6-35f3162eadd7", "value": 886781, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832924, "uuid": "d33c460b-c31a-4bc5-a0b5-00df5bbb2692", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9353cef-db51-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737832951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832951, "uuid": "e9fb0d52-ed8d-4b08-8ba9-395546044c07", "comment": "Malware payload", "value": "4cbf3f624ea9883ad50aa874eaff62e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832951, "uuid": "7b2e3905-1653-4d69-be44-4bafc9972d26", "comment": "Malware payload", "value": "c3f2f6119c23391dfd551122c3a9a098c1e1e318731f21943f34d140a9e07a1a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832951, "uuid": "8f1b138a-bd52-4217-b712-79cff41b129c", "value": "T1F05633B770D8BE524CD3813AE1C2A7B44B0586530FC7A4795940FE7760B4E8AA19E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832951, "uuid": "2f81c711-5282-4b65-875d-86c5549a22fc", "value": "98304:EqKsAb8HMLGcOHOGOrUFy11bW+GwYWE9RH45iCGwJ1JP4vq3rs6g3jKLAIoPrVgC:LvHGOuGOPdW+GwnE9RCiCGw/JCq3rW39", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737832951, "uuid": "42f95f17-f2de-46f6-bd36-de1129904e0e", "value": 6078820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832951, "uuid": "7edf7f8e-4842-4d72-b5bd-7390121b7d94", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949c1329-db52-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737833319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833319, "uuid": "ca38e6b6-7b3b-4ad4-ac7d-1140e0ba1d84", "comment": "Malware payload", "value": "11bcc532bdd43c2ad8bdf634e5111eb8", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833319, "uuid": "16495d63-f368-4f63-8955-b868a76dd9c1", "comment": "Malware payload", "value": "3f6e490692334c43ec8924ee2ab7004e88848e21e80a17a775c3ff5877f33c33", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833319, "uuid": "b783ba84-2e70-431b-a94b-8035e57b962e", "value": "T1778533630FE68131D3224EF512DBD75E7B67989AC1D09F6C8A3F0D83396FA6452C09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833319, "uuid": "6762a58f-0ca5-4d21-ad17-2b46ff4456ce", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833319, "uuid": "63797c1f-84b5-4253-a607-8ab119feab9d", "value": "49152:PNu5S1mgHcJSHDV/PzRiiztFCnE00Uo1/r1:PNu5P4u4RaE00Uopr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833319, "uuid": "2c4aad1a-9819-43c3-be4d-27e9b43828f6", "value": 1854464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833319, "uuid": "d02c21c6-5575-4ed0-9874-d4cf525cc83f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e503e1bc-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e812841d-9c6d-4db4-aba7-58537611a48b", "comment": "Malware payload (Gafgyt)", "value": "1ef20caf71bd8807e21ad939db3bd04c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "b6106cb6-a775-4ee7-b529-e9e79fe6ce16", "comment": "Malware payload (Gafgyt)", "value": "2b9d53eaa4a3122dad6d41ab9d7ef906283435c447cea035e07a9fa8e4edb2de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "feb1988d-4219-403f-a82f-132cb3445b0e", "value": "T1A2832B42E652C6B3C4430AB602AF6B160A32F9AA4E179F55F31D3DF49F124C97127F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "cb6a8996-2989-4307-b6c7-f59c2c2707f0", "value": "1536:3BfDbge/Bexx+4WiM3wuvsCH+qCuGH2PeJic5hqutq7blXs3r0OzRPF+jHeN:NDbXBeKlVAdCH+qHE2Dc5hquA1Xmr0OZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "4cc8fe7d-c6e8-4ceb-beda-b4e8fc3d66f0", "value": 82004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "06a547bb-434f-4aaf-96e9-deed5a568f80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e503fc68-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "8fea5038-d818-436f-ba15-18113410f3c2", "comment": "Malware payload (Gafgyt)", "value": "0d38627619383416228a2e5dee55c1f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "6a44db0c-0f35-45df-ba57-4f3fc37fd34a", "comment": "Malware payload (Gafgyt)", "value": "dd68f1ba75d20d2d41319194d9be2fc1538fec81721db9666e24bcca774ab552", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "b532cc90-fdc3-4b26-842f-c1695587a911", "value": "T177F33B05EA408B57C1D22776F6CF424A33339BA4A3D733159928ABF43FC279A5E329", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "6f3865b7-ff1a-464a-a5f5-6635361bc721", "value": "3072:00bacctY8a5k0Po8ZDF5Ex45hAN72BDNTBM/92LBZiBa1mNw3B65QRRi:/bacctYb5k0zZ5j5ha72lnM/90B0Ba1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "70f7c2c7-e7a8-4a1d-8a41-90bf04caf21f", "value": 158711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "c536a3ac-cbe2-456e-bf10-fa9d9ae48fdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5098a8f-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "97c7ecf8-38a8-44c4-8e96-47fed9268cf4", "comment": "Malware payload (Gafgyt)", "value": "1871adf4cb5111496891496dbf37d8f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "7e362b7b-443f-4589-a85b-270d270f6245", "comment": "Malware payload (Gafgyt)", "value": "5ed300125322ca5d475dad2ca9c9aa2598c7753531cc770a58ac3975f9acd72d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "659f69e0-6de4-4865-8418-f6de7bfab8b4", "value": "T131C3D917BB518EB3C81FCD3306AA460120CEE59616E56B6BB2B4DA6CF74784F09D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "9b49de1e-f89a-4141-bc75-eb255d977db1", "value": "3072:lK0Q5Y/cz+oe5hrqhGTRPRx9Fq51uUOypn:lK6/cCoe5hWUPRx9Fq51uUOypn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "37e525a7-22c8-41f4-9028-77fa59e62220", "value": 123179, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "89e63db1-8eab-48d3-b4cc-a3fb8a53b818", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e511fc54-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "ec75921c-4479-42a6-91a2-f84e46d2ff27", "comment": "Malware payload (Gafgyt)", "value": "8dc353295c2c5a71df522b3c4a59a4c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "1a622a9f-6530-4853-8e88-9f29da448ae7", "comment": "Malware payload (Gafgyt)", "value": "185fe2487058a9a5ca38f10881968389c944c5b512b03812dc8fe8f0958fec66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "847fc5dd-80e7-4de5-a775-11efa00e4774", "value": "T17A935C13771D0B53C09B9EF029FB27F1876ABAA112E76180B10DEEC45B72A706522F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "3fe6c71a-91d8-409d-a47f-1173293cb951", "value": "1536:aC8ljjM7L3jIYKgCv3uHpmjmxirG4yiNSSKw5h2krlQ0k0yD2PJojyKn:Ri3MkYFCopmj6irJB5h2krlQ0k0yD2xM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "7358f928-ff62-4c2b-a9ea-965de27f1e8f", "value": 94072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "325cf052-311c-457a-8670-75b2130fb7d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5131d5d-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "29254d7b-54e4-4a55-9655-8809c9e1e856", "comment": "Malware payload (Gafgyt)", "value": "f4e8406c2862b65eb74d75adb2a896ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "d7d8c988-9957-4287-9060-a21114e0d92e", "comment": "Malware payload (Gafgyt)", "value": "169f3c180f287df73c85d5a2f09bace8ec48a161a199736fd1e079937e7b7ff0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "6fd8d704-f3b2-4aa6-a6cc-9d73e2f54fac", "value": "T12FC3952A7E21ABFFE169863107F35F3087D522E627A15386F26CDA181E7118D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "8ece7e5d-f0d0-4df3-bb48-869128b808c5", "value": "3072:DLYxtjCSEEVt5hr+0xUvPRx9Fq51uUOypn:vCub+t5hqDvPRx9Fq51uUOypn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "345f7852-dc7d-4312-a484-9cd6b01e5c7a", "value": 123179, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "28f7fc99-93fa-4efe-bf81-cbe5a43a1075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51633cb-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "8cd13ca9-ec51-49f8-8681-b1295f4eee96", "comment": "Malware payload (Gafgyt)", "value": "21f611595e1506ff46527ad056a4df29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "05142dea-0f2c-4184-9e49-55a197cbb902", "comment": "Malware payload (Gafgyt)", "value": "b3201fc7f4b9313582958d6c01e011a02303d7bddb0564c5ac8ad8565d778637", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "7d3a8f55-4fd1-4ab5-adcd-c2f05c21179d", "value": "T1E0832B07A8615FB3C15669B531FB1E300763E9910F4B1A8A713DAAF4474B9CE781EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "891732bb-772a-4d1c-b19f-3c29a93e5361", "value": "1536:QWkDaiqMKJmuRO+4FCqMgTSACu5hrIfnQALzk0y/fKsjy1n:1QGTJF4FvZH5hrIfFLzk0y/ysjy1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "3323c7e5-66c7-4dd1-8bc0-848802bc2078", "value": 85862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "f586b936-a2fb-4ea2-bd23-f07ec183ed8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51fd250-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "cb62b3d1-dee7-41d6-aa91-7c9e2bbd4483", "comment": "Malware payload (Gafgyt)", "value": "a977e553fa0aaa1d2fd3d45d4d0cf80d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "b481e14d-d434-4671-8595-2a191ffaffff", "comment": "Malware payload (Gafgyt)", "value": "8679e2fd58f20a905b3284ea097b1a81843048db8954f034b670c8042857e9ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "ec5a6024-ca05-4af3-8255-7b63a9fd236f", "value": "T19DA31A45F9014727C2C227B6B7DF475D3B3257A8A7D73312A6386EB02FC27892E299", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "df527aa6-5388-4651-8770-5454aff9a92e", "value": "1536:QOs8fUOsBA+WuS2BJ1wAR13VKYmJjO/f5hYIXUe2rz1VpdHU8VEwoB/DQUDaLdHW:QhOMA+Wu0AbwYme5hYIEeIJ3F7oB/DQ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "831bc3df-6001-4735-b4c7-7fcbbba547ad", "value": 98030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "4342c6c2-149e-4be9-badd-8967260f7ab3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52021fd-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "629758b4-72f6-40e6-9b8e-598840242727", "comment": "Malware payload", "value": "24f814a55c16a5cb2d88d49cfc96aee5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "c7dc3cd5-3f81-48b9-bf6a-ad053ce5521d", "comment": "Malware payload", "value": "b159cff45d2a68a15e0fc68c026490fb6691a87d9574acfdf318a3948d8d7508", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "51ba1a5a-c083-43e7-b2ad-59846ca160f6", "value": "T17B41819B56610835AC65BC5775A9C4307491D8CFA4CAEF451CDE38FAF08DD28AC827", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "7e877cce-d068-4f55-8169-c29579b54511", "value": "48:1xRx/1xJnx1xhxP6puxj4LbUxFxJxZ3xBNKnsxpxMCxj4Lj:1nLnnrHDx4LbUT/XPNKnsHaCx4Lj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "20a2a37e-ff6c-49c1-afb2-884a98c6343f", "value": 2033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "afd54842-7981-4962-a105-f20565bb95a6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e520c9f7-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "8507d993-693d-49ae-a7db-92c8900a9f10", "comment": "Malware payload (Gafgyt)", "value": "c9a639b5bcc9e9515d863abb3388a6ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "5d469d6a-2966-40d7-bfda-b7fec40a75fc", "comment": "Malware payload (Gafgyt)", "value": "2cfc6d08483564cfe8fc93d40270dd8cc12b56a9c7f03d28209818a1f7bdca87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "6d55b745-e6cd-43e3-a12c-71035840cc08", "value": "T13A833B43B641CA73D08316F6129B5B150632F9BB1E5B9E56F36C3DB4AF110897222F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "066ad4b3-4a63-4cb5-88b3-d1661351ed12", "value": "1536:xNqbqkZ12Ue/Wz/P9ZhxUzi+8F0p32cBNf5hlQ7+cis3r0OzRPF+jHeN:xgbf12Ue/WDP9xUziB6pm25hlQScimrp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "006730db-c8ce-4af7-84ba-62165d37f702", "value": 82004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "411c6082-0516-4aad-bc82-d62634befad6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e522282f-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "a3b2972c-4059-4f49-a59a-6452871419b6", "comment": "Malware payload (Gafgyt)", "value": "93ad23c9a2ef5aedf07bb4cec1063b8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "45d913d4-cc63-4e04-b07a-8a3b5d1a4020", "comment": "Malware payload (Gafgyt)", "value": "883ea2f26e1adec011163b9020e37329e50d23f1536bd3e9e22759548949df42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "7bc7496b-6691-4d4f-a678-83cd02219252", "value": "T1B6A33C377B170E23C0CA547112E30732ABB5D79A38FA5387B9A06DAC6F12A843516B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "3764fcdd-1805-41d7-afa9-7f829b1bd23a", "value": "1536:q3qEa9+N95qWtlPt2phaac84/gdzQ/0kEy/UPKqjV83n:K8+NP9PEphaact41Q/0kEy/Uiqju3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "25ad4bdf-bdd3-46ce-8e16-0c743966f58b", "value": 102564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "c7b7d85a-669e-4d31-ac23-3036a08d9b3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e524dee7-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "60aa0003-dd72-4e57-b252-eb9512d17aa8", "comment": "Malware payload (Gafgyt)", "value": "fda5f387e84e7d7e0a1451c0780dbda6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "c0ff85df-7f8e-4683-8ff1-266080610094", "comment": "Malware payload (Gafgyt)", "value": "e905a56ed0b79d2cd3448407ce4a7c4b916c635f182a98fb46bfb96f8b2fc303", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "489f7e65-5f40-405c-ac73-30d9cca9d589", "value": "T191A32A05F9008727C2D327B7F79F075D7B3256A897D73301AA297EB02BC27992A399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "f00a35fb-089e-4aa5-87ad-e866fdf95341", "value": "3072:oROlP82W5t0i0P5hWIxeaphfm1mowWQQkha6Qzadn:dlWTL0P5hVxeum8owWQQkha6Qzadn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "873f858f-a7aa-4fed-8ea7-d93affbf35e9", "value": 105576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "ed8ba035-6a40-4e31-b62f-e37e630ab4e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52a8178-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e92b8199-c291-4dfd-9b5c-6ec14aad7abe", "comment": "Malware payload (Gafgyt)", "value": "8025099ede7845873cdbf084605e14b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "d9a713c3-43e6-449b-9cd2-316abfa8cf78", "comment": "Malware payload (Gafgyt)", "value": "c482c7f76235b213886ea92c46d1c44d70c697b14c2908dc7290e3c8b960f1db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "688fd3e8-2fd4-4baf-989a-fa0870c68f5d", "value": "T19DC33906E5508B57C1D2177AB79F460D37232BA897DB33129A247FB42FC279E1E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "43545c8a-3bed-408d-aba1-14ea885b55e1", "value": "3072:j6XaCc1WaCl9O8E/uPTb45hOsx2cr+B5h8mygQCYsmXKhi:j6XaCc1WcuPTU5hpx2tmmygQCYsYKhi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833884, "uuid": "0a59efda-4a39-405f-aa74-5d472ff6fa5f", "value": 120678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833884, "uuid": "de4492e3-cba2-4a63-94a0-f8e26ffdedda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a66fa4-db54-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737833944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833944, "uuid": "eaa8f346-ed79-48f2-915e-de438037f96b", "comment": "Malware payload (Gafgyt)", "value": "a7e015480f3f65e88e6dbbf89108db75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833944, "uuid": "08900403-5c15-408b-a680-f2bfe39c3bd3", "comment": "Malware payload (Gafgyt)", "value": "ed3a60b7e40fd099763a6b1616538ad54ebd777828864322afd1a1359edb3e04", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833944, "uuid": "96b334c7-f171-4043-b697-e250ad08b491", "value": "T189A30893F801DEA3F40E967604D74B217630FBA60E931662731739A6AE722D53827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833944, "uuid": "bacec405-a0e5-4a34-926b-2d27f703dd3b", "value": "1536:hZubYDIJ8FLAYd4bV2vgUrOhfAJGhxyyVElJ3YMu4FSmMk0yD2PKqjyun:hbDI8P4Rk6OGhxyyVElJ3YMJgmMk0yDu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737833944, "uuid": "ce73c934-90d4-4188-9276-a5fc387f62dd", "value": 98105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833944, "uuid": "aa9476cf-49c8-4841-b509-445ce947891a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cc005f4-db54-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1737834004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834004, "uuid": "0c9a2fce-0a07-4940-bec0-f6ebf7eda347", "comment": "Malware payload (Gafgyt)", "value": "b1ddc83af38d660fa95bf0a1f293acf4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834004, "uuid": "d27a87dc-fa73-4cdd-863c-daec78d059f8", "comment": "Malware payload (Gafgyt)", "value": "dafd9c44093b3a662007a421e0bf8fc01b429829b60cb85b72f7ef3635299d30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834004, "uuid": "1f923ddf-c5da-4533-b8bf-29e205545053", "value": "T148936C23B552C67BC0C386B527DB9A214823B5BA0F33724A73D47DE92F118C91E6DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834004, "uuid": "0df350f5-5010-4635-9e90-cb4028bdd44a", "value": "1536:+uLXuP6oMYexZBsRD8ZuDt7KyQLC7cc43RaphaGsaPZ3VVOXSPKm9pon:feP6hxZeSuDtGd27ccMRaphaGsaPxVVi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737834004, "uuid": "65e9b2fe-d63d-4672-bedf-e88b8831e9f7", "value": 93798, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834004, "uuid": "b937a9e8-04af-435c-a7a0-3915c3f0f38f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b43c5ad-db58-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737835746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835746, "uuid": "ad1c0ddf-d054-48ed-8677-7bc9dc7cfe12", "comment": "Malware payload", "value": "b45ed1f46b2ce44463e96aa45b0ee74c", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835746, "uuid": "6edd3a6e-3c01-45ff-bce3-8e1f4bf32fd8", "comment": "Malware payload", "value": "f8f69c4bcc5c5438fc0e648adab3e9942a415b324aef238cef986e3173879a1f", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835746, "uuid": "9c1e535b-7fc1-4189-9f14-f22e662a671a", "value": "T1229533D45FC18158D00E15B8D3017F955DABC3E8E4663FE8A78D6233EA11E079DDBA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835746, "uuid": "922659da-865f-4558-a3e8-385f12b5349a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835746, "uuid": "1d1211df-c349-469f-859d-4b5ebcaa9068", "value": "24576:XP3gOlwAZWh9ecs/T8SbT21ad1s9hhuOZ0lsVn5QlhClMkA/enIksFB6pZx3ssk5:1lwAZguT8q21g1AhnZCH/aEspZBkI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737835746, "uuid": "cb6ef0c5-2fbd-4132-bc61-748436b152c7", "value": 1908736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835746, "uuid": "3744f11d-01e7-408f-a73f-44f23be9bade", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2242c6e4-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737836327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836327, "uuid": "45a385f6-5f55-41f1-85f1-491a29e05dd9", "comment": "Malware payload", "value": "6ef8e9cdb74f1228ab63e739763f0a57", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836327, "uuid": "1c3f5af1-7a7a-46da-b1a7-0a26ea5a8fb1", "comment": "Malware payload", "value": "bed3020f4fcecb152624426838189933cef840a8ac2d63064be8c73fb270b1cc", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836327, "uuid": "3e518363-ae2e-4bd4-ad2e-a9533effba0d", "value": "T13BD52B52B509B5CFD48A17B49427CDC2596D07BB472148C3AC6DB4BEBEA3CC216B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836327, "uuid": "c8ecdd1e-e317-42e1-a65c-25d21e4e3f59", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836327, "uuid": "11e35daa-256a-45a1-8aee-30aa51464ebf", "value": "49152:Owg0n8oHiIC4eLgFvSP8ft/uzwtq6XCHM:Owg08oHiICpP8fwkq6XSM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737836327, "uuid": "8440baf2-875b-467e-9642-c6483848071e", "value": 2760704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836327, "uuid": "71aeabe9-abee-4791-96f4-d622895ee77c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1737836404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836404, "uuid": "84c575e3-f96a-4115-b3fc-2828f89760ad", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836404, "uuid": "adead426-3d83-4a3c-a59f-a4ab5614afbe", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "b9f8c34d-d2a5-4b83-acaf-dbe2bf6fceeb", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "0d8a1147-0b7b-4a86-ac62-e66ae39b24eb", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737836404, "uuid": "d25da129-c7e9-41db-adc3-c5fe060f120d", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "b05e5a06-02b5-46be-a3bb-429e6b0812b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "df8c1627-c33f-4566-8674-147200b4a590", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1737836404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836404, "uuid": "97a26618-ec2c-468a-9ad2-510fcd92cd1e", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836404, "uuid": "f3a28b62-eed1-47da-bbc5-672a1e48374a", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "3b5f088e-3d76-4829-9aaf-4c2ffef99fdb", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "793797bf-f79c-4804-bfd6-03bc290c0915", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737836404, "uuid": "08059f0c-3770-431b-8de6-a3bf69b21f27", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "bfe4f90d-9119-4c56-aeef-2bc8f8569ab9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836404, "uuid": "12daba19-726f-4f01-b7fc-e3674c93211c", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1737836406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836406, "uuid": "d1ed5d21-01fb-43fb-9882-46db4868f611", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836406, "uuid": "506d9ba7-9c75-4477-b1d5-8e24e820586b", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836406, "uuid": "925c0d36-752f-49d7-bb28-10a385363509", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836406, "uuid": "33a6fe46-2b96-4f23-8f86-2db57a8315af", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737836406, "uuid": "618ee2ef-1630-41cf-a751-4a05f4c5807d", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836406, "uuid": "3429a8d4-640d-4761-99ef-eec297837145", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836406, "uuid": "85b675b9-085b-4822-8975-dd3fe1d6d425", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1737836407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "2867d0b3-31fb-4065-984b-691612fcab63", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "d190a323-841f-4f92-b72b-647b49c49cb1", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836407, "uuid": "4092eb69-dfac-4fe9-9908-69ff64418fa3", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836407, "uuid": "0acf3e00-b5fe-433f-a586-428b8f451795", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737836407, "uuid": "70b1d4d2-67c4-4369-9724-f81d24e082ff", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836407, "uuid": "c68d5c04-0600-483f-96d9-5218866cb07a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836407, "uuid": "5942618c-a2d2-4b36-a572-6dd97e9f6ef7", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5840ba9e-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1737837084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837084, "uuid": "98569549-888e-446b-950a-424133b040b2", "comment": "Malware payload (Amadey)", "value": "d79aec2dc648f3601eb9960d3c7cf213", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837084, "uuid": "ea606e1a-7e3b-466d-a42a-e17a61281e04", "comment": "Malware payload (Amadey)", "value": "b6cafddccd610b4cec819162b92a6168bb98a42894499fe8f5029c8ff185bd62", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837084, "uuid": "115f44ef-e340-4e63-b2f2-2fbd2fd9c43a", "value": "T1D09533B94C706F20C99F0DF7D92A70509D4AEB314EAEF229C7835E97950E74B600A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837084, "uuid": "cd647024-972c-4e01-ac2c-948d7a6cdc58", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837084, "uuid": "b49f647d-63c4-4752-b724-412f5479d0be", "value": "49152:3KAwsQGcy3fo6jkl/M+w9G3+tmTzSqrT6rJzuoYu1y48jZl:3K8/cy3fo6ghMZGOYT6duoYu1MN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737837084, "uuid": "3b765d1d-e073-4709-97b7-c81e1b500581", "value": 1878528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837084, "uuid": "697a114a-d319-4eca-b78e-7a3d98508804", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2cc21a-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737837417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837417, "uuid": "168974a4-58b9-4ca4-85f5-d648fe4440eb", "comment": "Malware payload", "value": "50dc55ca837b464929023d149600c28f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837417, "uuid": "d844bab3-0dae-4e35-8d5e-553214b0c1e8", "comment": "Malware payload", "value": "d8dad67e6da79bdc48903ee0fe2be96291e2f188dc4231e2905e5f506462c86c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837417, "uuid": "143ca761-a2cc-4261-b31f-c573f4dede58", "value": "T1EE47DB8C0EB64EF8F265E01723616BA6E449241FEF453BDCF64D71AC9F04085FA9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837417, "uuid": "a4a47278-6721-4802-8cbc-20a26584d85a", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrv:Nu/MEdS9plw7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737837417, "uuid": "e61a2ae6-c98f-4cdf-b3c2-071b32aab9fb", "value": 25999232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837417, "uuid": "3eaf63d3-9208-4fcf-b46a-575683bdf60d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0422736-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737839030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839030, "uuid": "2005aef7-8236-47da-af0a-e503c773b2a5", "comment": "Malware payload", "value": "7544e4117ee5475dc5f5760db304c526", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839030, "uuid": "9615e667-0213-46af-889d-d75fe83f2e66", "comment": "Malware payload", "value": "73ede9493262094e111ebcaff2887b09ae25219e23ae8433171d573c6c359b50", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839030, "uuid": "b33e66f0-cd6d-47e6-bae5-4f5226bb89e3", "value": "T14B11BACD01A15A1F6EE2CD1EF4F99708A435F0C530D6C768EE289C3BA1961603D35A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839030, "uuid": "3aa24f06-0988-4c70-b630-b0995df3c15e", "value": "12:3J3GmcDGGmcr3XBGmcBNIBSAGmcKoKS/GmctxHPlGmc9xHPlGmcJOxGmc7F3laQ6:3J3MFaNII9KSkkcFa29sF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737839030, "uuid": "0e3fa15e-50c1-45c6-8818-d09e1ced7e16", "value": 923, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839030, "uuid": "e9ac3a62-520f-4f33-acf1-d1796ce527e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d3e9977-db68-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737842541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842541, "uuid": "c13bd646-310e-4305-a9da-c780a8cff983", "comment": "Malware payload", "value": "a86c153cfb39fc0bbaf573acaef27f93", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "loader-module", "colour": "#b0b10b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842541, "uuid": "1af28874-7a31-4602-a692-26cf0d572276", "comment": "Malware payload", "value": "0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "loader-module", "colour": "#b0b10b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842541, "uuid": "12adfd2c-ba0b-4920-9c37-6152a0847fcb", "value": "T1F9C45C17BAC1EC55D0FB827D7B24DBAA146C3C308788649B76C33FAA29609E145B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842541, "uuid": "e1fd1d60-97c2-48eb-8599-27dd9978702e", "value": "77fe109335e7ab6ad9c3ce6f6fc3c929", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842541, "uuid": "96cbc818-7dad-45b6-83a7-6eab5ed0a968", "value": "12288:1qqEj9B8vyNqf208h7ch7c8JtaEnNoWo:Ebn7o7rNoWo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737842541, "uuid": "623eeb55-7f6b-47b7-a4ba-e8bfaaf8289a", "value": 593408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842541, "uuid": "4482b3b8-6f1e-4f80-8013-c5ca0456cd1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bdacbeb-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1737843425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843425, "uuid": "6d591ea4-756e-4396-a72e-76e8d181062d", "comment": "Malware payload (LummaStealer)", "value": "ef489c304a73db3c11e87d913e96f50d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843425, "uuid": "4e2456a9-2749-413c-941c-ffc01d37e0fa", "comment": "Malware payload (LummaStealer)", "value": "cff31b7d06a81f1ecb519cc221d0d843d653204c9009d70b6616e4c8b6819561", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843425, "uuid": "50834ede-0b57-4cf0-98db-aa6503b04af0", "value": "T1CF748C0EEBB3A4B1E54B1479229FA37B9E3456215338DEC3DBC0DFC064276E65835A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843425, "uuid": "031eb3f2-6432-4432-9c76-a8e38b55deba", "value": "24f64b73f556c47c0657ccf7b9c30c6d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843425, "uuid": "fbade2f8-d2a6-41f1-b124-b6ae94fc0c4d", "value": "6144:QqbKM0nlXsjTGHHFRlV+m/Jpdk7A3LcTB1oqizdW6nPIpc+mEB+r3rWpC:/bK3Xsmb+m/JJLqh/qPIK/hqU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737843425, "uuid": "23639a52-b987-40e2-9913-3a2937070f8a", "value": 347136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843425, "uuid": "93888a99-5ad0-4881-927d-6923942a9cd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d874a462-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737843741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843741, "uuid": "f992e309-54d5-4c39-b6e8-372f1b683527", "comment": "Malware payload", "value": "094d58f12e9e5cd2b0da0991e33c911c", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843741, "uuid": "9d889e43-ebee-4898-915f-0420c0d8ed16", "comment": "Malware payload", "value": "a011bc2ef3423dc50b3d02dc69a4e890762b7da3854cf626bc59722cbe521abd", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843741, "uuid": "3a0d25c8-af9a-4527-8f31-b1f774d2afbe", "value": "T1BE5533B3B74D2BCAEDC3D9F8622760120E0D35CF1F56418992FB819269E6634A06D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843741, "uuid": "d54746bc-752f-4165-a3b9-bb455bb5b688", "value": "24576:bWHTJ0gNmj8ISrlbk0PjKe9KxgZhrJPXrJsKbQkVEzmvBiF:sJjbksjKeRZRpJlQkym5iF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737843741, "uuid": "5731b992-751c-4639-935f-d40c5af43738", "value": 1280547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843741, "uuid": "94b4fabc-41e8-4a5c-b7ec-ed9e2f0ed4dd", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cdd2ad9-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737843963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843963, "uuid": "a17baa23-5ef3-403f-9603-5595ea370568", "comment": "Malware payload", "value": "db295adcdc5b49a6e340156fded4b544", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843963, "uuid": "d6031dcc-65b4-49ad-af1b-77315874da5b", "comment": "Malware payload", "value": "49246b501f015de1f8ce47fcd9fd3e4a4380e1780b5583b80da81843bae7a9d3", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843963, "uuid": "6e3b5c95-6a88-40c7-95c9-37f3f2113621", "value": "T1EA853355FE332A08EC14003BBEC12B28A6ED2B689D5BC555455FE72CE4EB27D01E90", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843963, "uuid": "736bd17b-2dac-460e-9153-c86233533014", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843963, "uuid": "a4ccfab3-10a3-4a60-bec2-209b2858e3b9", "value": "49152:FlD9SNwrrOPc7xt/mjQ+BR+iS+xv8m7Ioy7yXEx7:F+yrFpQT8mxAm0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737843963, "uuid": "78abdecc-0706-46a8-b2ea-eab570fe08d9", "value": 1804288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843963, "uuid": "0613f639-356e-49ac-a9bd-84c86a010e20", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b85923a-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737844015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844015, "uuid": "a08fed76-6134-42e1-bc22-1983442e645c", "comment": "Malware payload", "value": "a644847b8985f18ef0d135a301722450", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844015, "uuid": "80aa15c3-e79c-4849-9b22-26dd223b5ef1", "comment": "Malware payload", "value": "1b4934168e25bff1cc75665178aa50cda707f863341408ff52a49c5a55997c1b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844015, "uuid": "81d27fdc-f2be-443c-b674-39904d4aa9a2", "value": "T13F0633A2D078F5BFE082E676C02AC9485907696202313E45F7CE9659CFA73C6CB117", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844015, "uuid": "13efa23d-124f-4b31-bf36-3b5460892ce1", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844015, "uuid": "e6148e62-059c-4fc6-9b6b-864c5f6d7cfd", "value": "49152:e9CE/SLEIrF4K4c5Ywzt+0CsE1VW1HZdFT+80GtBg8HgKtRdOCYDLBlUNu87GO/n:4CuIrFhzZmM15dFa80GDgCFLOCwdlInn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737844015, "uuid": "40bb3d16-6318-4aac-a899-64f5b57419c9", "value": 3687906, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844015, "uuid": "a69a25e7-4eae-435b-afd0-63f9280a57d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82f5de82-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1737844027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844027, "uuid": "6b72f780-4cff-4659-a1a0-7c7efec33735", "comment": "Malware payload (Healer)", "value": "25c5f237a1e7d05bb82657e10bf0bc0a", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844027, "uuid": "efffc858-e734-476a-9520-60bba6570b2e", "comment": "Malware payload (Healer)", "value": "b7e75d397c92b481551669a78393ebae5b124f58d28c50a555d11d7c3e27675b", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844027, "uuid": "ace51bb8-f78b-4fcd-a618-e3d320ae6c5d", "value": "T1D5D549B2AB0976CFD08E27749637CE86995C07B9072049E7AC6C78797D77CC112B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844027, "uuid": "34f5c7e7-c3c8-4eb2-9171-8c7cb28779a5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844027, "uuid": "d189a33e-0c68-44e8-8230-b137909510fa", "value": "24576:z3nHXdK39jSqO+98SIYC/SVgxvXh5zKGE053QWZh9GuO46SHSp4OMdfyNE3wwqAT:z3nHtHqjdC6VgRpO7vufy6gn+EeALDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737844027, "uuid": "cfadf799-d979-4800-9cf4-6320e7248102", "value": 2750464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844027, "uuid": "8c9c9a0a-af39-4fff-bed1-193f6db856c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d93eee7f-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737845460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845460, "uuid": "aa4b0e18-5903-4f16-9626-7acf735a0159", "comment": "Malware payload", "value": "90bc9e6e5a642e227a7bb0a9a66662af", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845460, "uuid": "9fa5db3b-e508-451a-b52e-f1e9e791351f", "comment": "Malware payload", "value": "4a8a627d58aa2d3c208cc1baa2a5107210ddc88d129a3b1caf78fb15e781067e", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845460, "uuid": "d3248aa3-46b2-4fbd-a7d8-9f17e8f57873", "value": "T10B53F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845460, "uuid": "3c856691-11f7-4b0a-a7af-78d0c61eb168", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dsGFR1X1t1RB1p+dy2s0:aA1fho1P6n22GFR1X1t1RB1p+dP1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737845460, "uuid": "73f033a9-428b-4a24-a3ee-86cf8c95529d", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845460, "uuid": "1ef0ad12-fe64-4697-ae67-9adc6485d795", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36de9318-db6f-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737845618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845618, "uuid": "55bcf090-d8b3-4573-95e1-70a89dab8cc9", "comment": "Malware payload", "value": "3b91508a45bca41d4b7ed3967491eb62", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845618, "uuid": "23f73efa-ebfd-4253-96ac-04a6110c005f", "comment": "Malware payload", "value": "5a22428d004f279cd150f973aba4387b29ec7dcae18ebbd8f78edcf6395e4fb8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845618, "uuid": "126d244a-c81f-46ff-9638-72d00cd19c93", "value": "T1889533077AE30894D66863BE28235F3132ACD6FB57AB2B665D008B7151576CCF3074", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845618, "uuid": "9d5d64cb-ed00-466c-a1d4-278a6c00245d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845618, "uuid": "04d1e742-ff74-4ae6-83ce-31231882e2ab", "value": "49152:TmEc4JUp45HfcflyZDOWIrnFtSpheNentz/h7j7lKH:TmFkU25HkflYLIrFu4NentzJ7jy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737845618, "uuid": "e5246abb-ea0a-40ab-9f1f-6073363a954d", "value": 1889792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845618, "uuid": "8992fcce-6e29-43f4-b1f3-be443f88718d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec263d0f-db6f-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737845922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845922, "uuid": "cc774590-a721-4eb8-83b8-aae65737f89d", "comment": "Malware payload", "value": "c10d14b15b5c703549a6387c038dcce2", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845922, "uuid": "48ed8ab6-cdd2-4636-a5e8-52212b7a185b", "comment": "Malware payload", "value": "290b9f894603bb186a92ee90870eceff34dcf34f274bf645746afab4c2fba40e", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845922, "uuid": "72ef49c3-a5de-47ed-8569-5fa18a4a265f", "value": "T17F85330AD7933919D28BDF7486C77740B17CE0E29C0BFE396005127AA2FB6F9AD568", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845922, "uuid": "f4ee3c02-2a67-4e4c-84f1-b3a21cac0af5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845922, "uuid": "b925d941-e27f-4849-b866-e9cb77ba1adc", "value": "24576:0xuOhQCI5dyosOckWI7TFt2Et4fncQnS3gITQO2pMPyl6umdyod8y9Ns/zy0tVcu:0xuODIr4KiMCnSBVYrobs/LVcc0UVsf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737845922, "uuid": "813bcc0e-51ef-42bc-942a-e549d758b701", "value": 1856512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845922, "uuid": "01b69320-326d-4dfe-9b37-6647f05c3968", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8138fbae-db70-11ef-a9ce-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1737846172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846172, "uuid": "6fb47cea-e1bc-4618-88f4-f5ee64c84b08", "comment": "Malware payload (CredentialFlusher)", "value": "f47f79dbc85251238300e77d1ae85c69", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846172, "uuid": "cb02d574-c7cf-470e-967b-5869718aa18a", "comment": "Malware payload (CredentialFlusher)", "value": "8d6dd04bf3260706c3d872e70c3addb6a0261a1b20587600af8e92a178cddac7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846172, "uuid": "836bda69-fb3d-4af0-a455-12b789147d66", "value": "T1D625AE0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846172, "uuid": "48ef9da6-80b3-4a33-bd26-76b6aaaadf54", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846172, "uuid": "e6bbb077-a658-4699-8e9f-05b1ec572108", "value": "24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8azfint:LTvC/MTQYxsWR7azfi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737846172, "uuid": "458a203a-3251-48dc-8a59-966c1d7df8e6", "value": 972800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846172, "uuid": "1ebb2407-1073-442d-b4e9-50b6a08cf4a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d5000ba-db73-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737847481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847481, "uuid": "5de0a3e5-f573-45bd-a962-aa97c58eae5a", "comment": "Malware payload", "value": "7ca1519abd7349afc74cef85b21ded89", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847481, "uuid": "9e9eef38-611e-4244-95e4-b5b9b857163d", "comment": "Malware payload", "value": "04254fcfbb048db45d678632936be81816162b84120bb0c8dbb1f62c2975ebb0", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847481, "uuid": "c0677563-7039-4c8a-9a90-531f5db07cc1", "value": "T18FC53B92BC4571CFD08E2BB9902BCD469A5D07F90F1609D39C6DA4BABDB3CC512B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847481, "uuid": "087b5f36-c50d-4065-bc4b-69a054c69dcf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847481, "uuid": "61425008-c12d-4237-acdd-2e28f321ece0", "value": "49152:Zxwy853q27TfKRBy5ZWKdFnr8Djdf4xkn:ZxfEa27TfKRBKWEnr8DRf4m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737847481, "uuid": "d078fa7e-64c2-4555-ac36-8b9abd3965ca", "value": 2725888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847481, "uuid": "35d304f3-1e2c-4dd1-a0b2-ea2710455450", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d19bf497-db73-11ef-a9ce-82aee05be84a", "comment": "Malware payload", "timestamp": 1737847804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847804, "uuid": "a140ac11-fb48-4fe2-a994-4c803d467847", "comment": "Malware payload", "value": "d9565d6392a78f8e48f4f30100fb0b62", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847804, "uuid": "fc09bad9-37c0-441e-a907-8a11855f6f19", "comment": "Malware payload", "value": "433ddc4730382ea2de857a0de442d6676b4ad31fd24773aec529ea66e2b9d4dd", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847804, "uuid": "2731de90-6736-41ed-8c35-008bb7c23ada", "value": "T19595338BA4559214CE1C5773BA693F84966B85348ECC07F7F33DC4B6429BFE398249", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847804, "uuid": "a479b122-9a0c-472d-a488-cfc7ee948b2f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847804, "uuid": "c1352e7b-344e-4968-a761-59e520070c4d", "value": "49152:XNwCS1SgUF2qo1gdc5Pg8mNAZaa60PcMoRpE:dwjg2qCfi6ZaaryRm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1737847804, "uuid": "80ceace8-0a35-4226-a388-e7f9f40f2de3", "value": 1915904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847804, "uuid": "7cfa1670-2fd8-48d2-b6e5-7d0c37778b5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763224, "uuid": "60456a0e-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.104:33051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763325, "uuid": "9ccbca03-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.27.132:33300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763473, "uuid": "f4daef34-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.41.76.228:41779/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763473, "uuid": "f4daef82-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.188.138:52906/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763703, "uuid": "7de4df8a-dab0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.46.241:38635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763753, "uuid": "9bbd85eb-dab0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.129.166:36271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737763865, "uuid": "de858334-dab0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.104:33051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764105, "uuid": "6d9ceead-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.131.95.55:35452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764105, "uuid": "6dc88f1b-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.90.242:34305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764106, "uuid": "6e064677-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.57.147:38668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764106, "uuid": "6e06a029-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.218:60520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764165, "uuid": "916c77af-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.188.86.133:45013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764230, "uuid": "b829eb1b-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.60.152:44504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764356, "uuid": "0314138b-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.235:58125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764405, "uuid": "202d7320-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.35:36121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764405, "uuid": "2030038c-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.49:33943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764421, "uuid": "29f1cd59-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.187.208:42439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764464, "uuid": "43a01634-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.98:43152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764705, "uuid": "d2fc2131-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.83.166:33985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764825, "uuid": "1a8f8af8-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.143:56953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737764973, "uuid": "72d11711-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.109:49782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765005, "uuid": "861826ac-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.197.135:59035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765064, "uuid": "a94d1090-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.27.132:33300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765065, "uuid": "a9a9706f-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.42.76:41349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765129, "uuid": "d0219383-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.246:57491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765245, "uuid": "152240a3-dab4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.224.168:49995/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765442, "uuid": "8a8991cf-dab4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.173.177:41945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765484, "uuid": "a3c0fc10-dab4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.113.247:54949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765724, "uuid": "32e5c696-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.100:35857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765784, "uuid": "564c8b64-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.205:58224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765844, "uuid": "7a333395-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.99:41101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737765846, "uuid": "7b30869a-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.160.4:46897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766025, "uuid": "e5f0ec30-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.143:56953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766084, "uuid": "09127ca6-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.11.199:51730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766145, "uuid": "2dad8fda-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.131:36357/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766146, "uuid": "2df9c1bd-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.162.0:51369/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766162, "uuid": "37a4f746-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.2.148:47716/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766445, "uuid": "e05c0710-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.135:46850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737766563, "uuid": "26e895d0-dab7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.7:33734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767000, "uuid": "2aebabe8-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.173.177:41945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767013, "uuid": "32a1ba44-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.86.93.167:57968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767047, "uuid": "475c2f54-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.239.163:45761/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767104, "uuid": "69671a6c-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.18.18:47839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767165, "uuid": "8d78f020-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.92:33108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767301, "uuid": "de5c08c4-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.51.169:39829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767826, "uuid": "17ad9766-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.100:35857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767884, "uuid": "39fb4e0a-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.11.199:51730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767884, "uuid": "3a223c2d-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.135:46850/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737767953, "uuid": "63458ea6-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.111.254:50418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768065, "uuid": "a5bdd3f8-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.232.94:38534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768184, "uuid": "ed048ac9-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.114.103:60037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768184, "uuid": "ed07fa56-daba-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.7:33734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768245, "uuid": "114621d2-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.174.35:34676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768306, "uuid": "355bfe0b-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.144.92:34670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768544, "uuid": "c381a823-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.233:60721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768545, "uuid": "c3fecc99-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.92:33108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737768725, "uuid": "2f8e72e1-dabc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.162.200:40930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769024, "uuid": "e1ce0f31-dabc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.181.16:49516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769144, "uuid": "28d49fe4-dabd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.132:35150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769325, "uuid": "94e01019-dabd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.103.193:60665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769385, "uuid": "b88efb2d-dabd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.191.54:49567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769505, "uuid": "002f4c00-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.232.94:38534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769564, "uuid": "2385b07d-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.10.233:60721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769760, "uuid": "98582846-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.236.216:44280/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769805, "uuid": "b2e5a6cd-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.139.73:42706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769805, "uuid": "b3036e0f-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.144.92:34670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769882, "uuid": "e0b9376b-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.1.30:46387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769925, "uuid": "fab38cef-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.99.119:52074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737769985, "uuid": "1e553b74-dabf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.101:36742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770073, "uuid": "528aa0dc-dabf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.47:45652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770164, "uuid": "88e4df7c-dabf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.197.135:59035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770405, "uuid": "18e7291e-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.3:46210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770406, "uuid": "1911357f-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.29:52349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770465, "uuid": "3c2e6c6a-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.248.55.76:47045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770465, "uuid": "3c589c88-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.109:51474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770524, "uuid": "5fa2d02f-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.198.87:37997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770645, "uuid": "a7abc80b-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.127:47771/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770659, "uuid": "afec4e16-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.237.19:56269/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770705, "uuid": "cb956876-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.177:47739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770705, "uuid": "cb982b8d-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.174.35:34676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737770957, "uuid": "61f4ba0e-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.141.242:34370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771005, "uuid": "7e851c67-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.254.174:34895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771006, "uuid": "7f10e3d2-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.73.15:52167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771062, "uuid": "a087f686-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.245.121:47341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771062, "uuid": "a0884be1-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.191.54:49567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771063, "uuid": "a0f28291-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.93.217.147:60458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771364, "uuid": "547b36b1-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.139.73:42706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771365, "uuid": "54e2e319-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.155.58:44351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771366, "uuid": "553a5232-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.30:34803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771379, "uuid": "5d1765d3-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.111.218:49660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771388, "uuid": "628e5994-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.192.252:34990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771484, "uuid": "9c21bf98-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.190.5:34299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771485, "uuid": "9c333698-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.57.68:33008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771545, "uuid": "c02d13e1-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.185.46:34799/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771546, "uuid": "c09005e5-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.237.155.229:43327/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771664, "uuid": "06eca6d3-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.181.16:49516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771665, "uuid": "07cfc0c9-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.47:45652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771725, "uuid": "2b81b60f-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.93.217.147:60458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737771964, "uuid": "ba0bf36d-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.103.193:60665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772029, "uuid": "e0fc84eb-dac3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.27:55864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772207, "uuid": "4af38a8a-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.245.121:47341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772208, "uuid": "4b7ce86d-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.237.251:55132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772266, "uuid": "6db04574-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.137.179:36752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772324, "uuid": "90ae4492-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.245.5/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772445, "uuid": "d877ad80-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.141.242:34370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772445, "uuid": "d8cefa7f-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.88.156:33401/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772447, "uuid": "d9a9ea23-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.253:59682/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772505, "uuid": "fc4f2723-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.39.67:39037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772505, "uuid": "fc56f31b-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.57.68:33008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772506, "uuid": "fceddc0f-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.194.185:42729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772506, "uuid": "fd43849a-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.73.15:52167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772684, "uuid": "66ea7ce1-dac5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.190.5:34299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737772864, "uuid": "d26ccd43-dac5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.237.251:55132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773113, "uuid": "66f9a0df-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.1.30:46387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773166, "uuid": "86457ca4-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.216.137:43747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773287, "uuid": "ceb5c828-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.20:34379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773353, "uuid": "f5f78d09-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.189:38742/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773429, "uuid": "235fc87f-dac7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.27:55864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773464, "uuid": "37d7713a-dac7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.216.36:58628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773525, "uuid": "5c6039ac-dac7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.233:39634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737773885, "uuid": "32b35f21-dac8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.137.179:36752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774005, "uuid": "7ac63b27-dac8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.177:47739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774078, "uuid": "a6056d14-dac8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.102:60249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774273, "uuid": "1a79e494-dac9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.181.97:40063/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774277, "uuid": "1cdfe293-dac9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.181:56739/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774544, "uuid": "bb9f9e31-dac9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.83.166:33985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774724, "uuid": "26c4cfb5-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.99:49105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774724, "uuid": "26da506a-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.124.250:50484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774724, "uuid": "272d152c-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.59:40156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774752, "uuid": "37c68b52-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.20:34379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774785, "uuid": "4b90228f-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.104:37860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737774844, "uuid": "6ecaabed-daca-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.216.201:52030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775325, "uuid": "8d3fd70f-dacb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.233:39634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775445, "uuid": "d4b3cdf3-dacb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.27.196:60162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775464, "uuid": "dfd43d98-dacb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.183.242:50997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775505, "uuid": "f8489782-dacb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.132:37068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775566, "uuid": "1d0cbc67-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.43.150:41314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775569, "uuid": "1e80481b-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.13.186:45765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775624, "uuid": "3fc12f18-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.13.186:45765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775684, "uuid": "6389751a-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.216.201:52030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737775744, "uuid": "872c6e03-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.93.150:54093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776044, "uuid": "39c2997c-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.3:46210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776044, "uuid": "39ce1e3c-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.124.250:50484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776104, "uuid": "5dc44ba2-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.99:49105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776133, "uuid": "6ea84cc7-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.92:45734/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776164, "uuid": "813df34e-dacd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.104:37860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776465, "uuid": "3495b5ea-dace-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.250.10.44:43332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776465, "uuid": "34ae52a6-dace-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.43.150:41314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776525, "uuid": "58605b9e-dace-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.183.242:50997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776945, "uuid": "52c1ea03-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.114.17:52689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737776945, "uuid": "530ca7aa-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.243.167:46333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777006, "uuid": "77368108-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.132:37068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777066, "uuid": "9ab5c574-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.230:38820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777185, "uuid": "e1aef736-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.138.255:52186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777245, "uuid": "05892dd9-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.104.194.64:52291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777424, "uuid": "70944804-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.254.100:52344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777425, "uuid": "70f72867-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.67.239:55527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777426, "uuid": "71455f58-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.213.42:37516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777453, "uuid": "81893737-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.22.78.157/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777486, "uuid": "953ccda8-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.222.71:45121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777544, "uuid": "b82ca680-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.141.56:58415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777560, "uuid": "c189c3dd-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.237.246:49646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777845, "uuid": "6b6439f4-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.182:56433/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777846, "uuid": "6c1679ab-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.73.143:57961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777870, "uuid": "7a4f2f25-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.29.185:48591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777905, "uuid": "8efc50a8-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.232:51386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777907, "uuid": "9011652d-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.59:59982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777963, "uuid": "b1dcbbbd-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.101.217.208:60927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777964, "uuid": "b2555d18-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.135.17.58:40682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737777964, "uuid": "b282f165-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.209.131:44012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778084, "uuid": "fa042506-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.205.38:47873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778385, "uuid": "acf2659f-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.172.60:55428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778385, "uuid": "ad2f648b-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.59:40156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778445, "uuid": "d0dbf1db-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.238.96:43560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778461, "uuid": "da41d087-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.180:41861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778505, "uuid": "f4974c06-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.237.246:49646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778505, "uuid": "f4f96fc1-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.26:46388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778744, "uuid": "8318711b-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.114.17:52689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778747, "uuid": "84ab9425-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.167.80:32892/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778763, "uuid": "8ec2ece0-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.30.52:45547/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778805, "uuid": "a7a25ea2-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.87.76:50977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737778926, "uuid": "ef618565-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.39.19.233:39729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779045, "uuid": "36afafdb-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.104.194.64:52291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779046, "uuid": "36f21781-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.164:54007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779189, "uuid": "8c9e350b-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.39.19.233:39729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779227, "uuid": "a31f326c-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.18.102:35262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779344, "uuid": "e8aaea59-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.95.175:51871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779344, "uuid": "e8ab5fd8-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.152.11:39621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779524, "uuid": "5411423c-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.232:51386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779525, "uuid": "54968bfc-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.101.217.208:60927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779644, "uuid": "9bb3d13f-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.205.38:47873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779645, "uuid": "9c0dba5e-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.154:38903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779645, "uuid": "9c34c8a4-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.73.143:57961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779824, "uuid": "06e6bb23-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.128:60707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779825, "uuid": "078c7ea2-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.59:59982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779885, "uuid": "2b167525-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.26:46388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737779886, "uuid": "2bcecf9d-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.180:41861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780064, "uuid": "95d350ba-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.238.96:43560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780213, "uuid": "ee99987e-dad6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.222.71:45121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780248, "uuid": "03a727ee-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.18.102:35262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780305, "uuid": "25cdc283-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.64.215:35480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780485, "uuid": "90b45bd3-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.74:56418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780546, "uuid": "b52f48ad-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.243:43645/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780566, "uuid": "c0eb6001-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.112.164:55835/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780724, "uuid": "1f99745b-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.117.143:45110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737780785, "uuid": "43969fb1-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.230.247:35572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781024, "uuid": "d1dbf5cf-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.37.250:44482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781085, "uuid": "f689ca48-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.24.153:53694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781086, "uuid": "f6d993e8-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.87.104:45711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781444, "uuid": "cc77f098-dad9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.64.215:35480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781459, "uuid": "d5280d72-dad9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.27:49142/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781805, "uuid": "a37243a4-dada-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.106.211:36962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737781924, "uuid": "ea6582fb-dada-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.107:41756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782165, "uuid": "7a082bf3-dadb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.106.52:35421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782351, "uuid": "e941aac8-dadb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.104:33070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782405, "uuid": "0916ce1a-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.230.247:35572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782405, "uuid": "09252f31-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.117.143:45110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782406, "uuid": "09c04bae-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.101.50:39082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782584, "uuid": "73d8abdd-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:51070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782584, "uuid": "73ed3409-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.37.250:44482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782827, "uuid": "04d81b15-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.177.143:60831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737782885, "uuid": "2776079c-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.88:45064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737783007, "uuid": "6ff4f384-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.86:35713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737783244, "uuid": "fd8568df-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.107:41756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737783438, "uuid": "711d390c-dade-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.148.156:42560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737783789, "uuid": "41eddc2e-dadf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.104:33070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737783964, "uuid": "aabad4c0-dadf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.249.173:36337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784084, "uuid": "f20813e6-dadf-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.101.50:39082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784161, "uuid": "2032e978-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.103.245.200:50298/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784205, "uuid": "3a2cf2a4-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.63.53:48940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784324, "uuid": "812c55c9-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.123.116:60099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784338, "uuid": "89950a36-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.244.178.208:43014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784444, "uuid": "c85ee75c-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.88:45064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784445, "uuid": "c91a7ee2-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.7.51:60244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784565, "uuid": "10f085d7-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.104.9:48528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784625, "uuid": "34bd31eb-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.164.250:35778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784626, "uuid": "3505b6c9-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.27.93:45038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784644, "uuid": "4014e789-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.142:54448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784654, "uuid": "457bc36a-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.246.14.88:43180/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784654, "uuid": "45a3a964-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.163.172:36441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784654, "uuid": "45a5b797-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.163.172:36441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784684, "uuid": "579b53b6-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.111.76:57669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784684, "uuid": "57f47955-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.215.7.89:40451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784685, "uuid": "584afd33-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.177.143:60831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "9f6b81e5-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://freevpsmethods.github.io/Robot_Verification/Verify.hta", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "getscreen", "colour": "#816746", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784804, "uuid": "9f75420c-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Matrix2077v2/dsiasif/refs/heads/main/main_mpsl", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784865, "uuid": "c3870b36-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.143.200.244/Documents/Rechnung563537.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784867, "uuid": "c490677f-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/New%20Order.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784867, "uuid": "c49249b7-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.8.34/home/rh_0-8_2025-01-23_15-05.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784867, "uuid": "c494d516-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://87.120.126.48/not", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784867, "uuid": "c5031626-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.48.166/Downloads/notu.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "c528fe71-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://87.120.126.48/1pm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "c52a1d9b-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.8.34/home/h_0-8_2025-01", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "c52f71ff-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.3.94:52077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784868, "uuid": "c53cbd14-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://ripplemascot.money/mickeym/Booking_Invoice45678.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "c5d96404-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://ripplemascot.money/mickeym/Mickey", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "c5d9b986-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.183.50.117/Downloads/zoom_invitecode=23884232.zoom.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784869, "uuid": "c5df98a3-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.183.50.117/Downloads/zoom_invitecode=23884232.zoom.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "c65f8bac-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://maerchen-beat-frei.ch/images/theaterbar3.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "c66f853a-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://maerchen-beat-frei.ch/images/theaterbar.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "c67a10df-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://maerchen-beat-frei.ch/images/BQEHIQAG.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "c69cef49-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://ripplemascot.money/mickeym/invite79244072.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784870, "uuid": "c6d32ec8-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.143.1.76/Downloads/Faktura-252201.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784871, "uuid": "c7565024-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://maerchen-beat-frei.ch/images/BackgroundAnimationv2.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784880, "uuid": "cc579bc7-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/New_Order.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784880, "uuid": "cc71e785-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.246.189.136/Downloads/invoice79244072.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784888, "uuid": "d119731c-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.48.166/Downloads/1pmcmd.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784984, "uuid": "0a466a29-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.35.179.223:45248/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784986, "uuid": "0b755101-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.85.116:33128/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784986, "uuid": "0ba7ffe2-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.188.117:60941/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784987, "uuid": "0c38097a-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.161.10:59045/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784988, "uuid": "0ce82c6a-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.204.225.182:44684/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784992, "uuid": "0ef64eed-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.73:56422/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737784998, "uuid": "13035cb9-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.132:58925/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785007, "uuid": "17eef50f-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.113.158:60000/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785011, "uuid": "1a7ce436-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.244.75:56596/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785013, "uuid": "1b83605d-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.224:10875/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785013, "uuid": "1b83f91c-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.188:54449/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785013, "uuid": "1bcb2981-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.15.10.75:51384/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785013, "uuid": "1bce9d16-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.251.210:10179/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785013, "uuid": "1c046442-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.86.184:39785/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785285, "uuid": "be215354-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.147.11:52066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785542, "uuid": "572fecbf-dae3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.35.21:54180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785713, "uuid": "bd014bb7-dae3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.246:44480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785825, "uuid": "ffa16680-dae3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.42.76:41349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785944, "uuid": "46a653d0-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.152.220:38189/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737785944, "uuid": "46db3a05-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.105.107:42975/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786006, "uuid": "6b97292d-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.7.51:60244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786184, "uuid": "d5fdeea4-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.127.97:41347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786501, "uuid": "9270bf2b-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.223:45434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786544, "uuid": "ac49e34b-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.112.137:33373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786545, "uuid": "acbfdf5d-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.250.10.44:43332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786606, "uuid": "d1608f36-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.147.11:52066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786907, "uuid": "847b5f02-dae6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.246:44480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737786965, "uuid": "a71c562c-dae6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.104.9:48528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787026, "uuid": "cbad84de-dae6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.27.230:34948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787152, "uuid": "16fbc29c-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.223:45434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787345, "uuid": "89871efd-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.96:47824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787347, "uuid": "8aebd45c-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.116:34767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787505, "uuid": "e95a876f-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.110.104:40868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787564, "uuid": "0c88d744-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.189.51:49616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787684, "uuid": "53f561c6-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.86:40262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787745, "uuid": "7811ae52-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.183.25:33344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787755, "uuid": "7e22b477-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.6.176:51773/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787961, "uuid": "f915fab9-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.181.236:36157/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787984, "uuid": "06564a5c-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.29:52349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737787984, "uuid": "06b937ac-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.123.116:60099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788224, "uuid": "95838dce-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.183:49727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788224, "uuid": "95c7e328-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.57.147:38668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788344, "uuid": "dd400786-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.105:59069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788360, "uuid": "e6923974-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.6:58957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788645, "uuid": "905e64d8-daea-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.40.96:33437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788647, "uuid": "91a6e113-daea-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.118.66:57341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788705, "uuid": "b43b3d98-daea-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.56.81:55132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737788885, "uuid": "1f5fd2f4-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.110.196.225:49682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789185, "uuid": "d24ec0f9-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.151.64:32926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789244, "uuid": "f59a79d7-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.188.86.133:45013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789245, "uuid": "f66284c7-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.140:58489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789424, "uuid": "611631ed-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.86:40262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789487, "uuid": "8646779b-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.64.225:41488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789544, "uuid": "a86833fc-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.101:36742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789553, "uuid": "ad9aabab-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.170.115:47464/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789605, "uuid": "cd026d68-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.101:49994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789666, "uuid": "f122b6de-daec-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.201:41387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789723, "uuid": "135e71f7-daed-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.105:59069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789784, "uuid": "3785159f-daed-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.123.54:49007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737789784, "uuid": "37a56c38-daed-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.123.252:47925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790085, "uuid": "eac05f59-daed-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.118.66:57341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790145, "uuid": "0ececad1-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.225.7:56788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790386, "uuid": "9e4f2d28-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.212.82:44910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790445, "uuid": "c1407485-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.110.196.225:49682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790445, "uuid": "c16e9385-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.44.50:54771/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790446, "uuid": "c204c958-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.143.91:41919/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790505, "uuid": "e52c049f-daee-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.7:60423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790564, "uuid": "0839f06c-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.140:58489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790641, "uuid": "3693e21a-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.215.151:38762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790685, "uuid": "5082e820-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.51.10:41403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790747, "uuid": "75b52626-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.131.73:55240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790805, "uuid": "97e58985-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.133.140:40566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790805, "uuid": "9817bfa5-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.133.140:40566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737790924, "uuid": "df0b7b6a-daef-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.101:49994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791166, "uuid": "6ef2776a-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.201:41387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791168, "uuid": "70a54bb4-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.100.247:57923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791407, "uuid": "fead9c68-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.234:38936/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791407, "uuid": "feb26ef0-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.160:37280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791584, "uuid": "6852ee37-daf1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.164.250:35778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791587, "uuid": "69fc1da6-daf1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.237.161:52510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791765, "uuid": "d4430438-daf1-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.125:35380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791886, "uuid": "1c7cd3a0-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.70.80.82:58511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791944, "uuid": "3ee0cc28-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.64.50:38685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737791951, "uuid": "43512f4d-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.211.143:51787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792064, "uuid": "866ab652-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.135:58611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792185, "uuid": "ce743326-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.55:42805/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792185, "uuid": "ce745fdd-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.55:42805/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792186, "uuid": "cf202a0b-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.115:43485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792224, "uuid": "e5a05117-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.65:57111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792253, "uuid": "f6fb0891-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.162:59804/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792307, "uuid": "1768dba2-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.156.217:43636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792364, "uuid": "394edbfd-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.87.18:33036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792545, "uuid": "a4f89e0a-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.144.50:42629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792665, "uuid": "ece2c320-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.160:37280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792725, "uuid": "1046990d-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.215.151:38762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792788, "uuid": "35caf966-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.106.248:37185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737792844, "uuid": "5750b4b2-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.154:38903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793085, "uuid": "e714dce6-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.243.115:40123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793144, "uuid": "0a2ca87e-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.183:49727/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793324, "uuid": "756cc48e-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.123.252:47925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793324, "uuid": "758a3452-daf5-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.243.115:40123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793566, "uuid": "0584202f-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.221:47761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793744, "uuid": "6ff8722e-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.36.155.151:52041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793865, "uuid": "b8292bf6-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.125:35380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737793985, "uuid": "ff889489-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.86.34.35:36525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794046, "uuid": "23df75de-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.154.51:36069/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794047, "uuid": "24bd4198-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.224.198:47469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794169, "uuid": "6ce816aa-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.221:47761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794305, "uuid": "be2dea5d-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.177:37749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794406, "uuid": "fa383f1e-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.55.89:38275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794467, "uuid": "1f0b82b2-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.1.196:36463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794541, "uuid": "4aadeac0-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.9:53420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794585, "uuid": "65457648-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.147.244:54449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794825, "uuid": "f3e13bca-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.144.50:42629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794900, "uuid": "20d5c995-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.148:45036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794943, "uuid": "3ab47a65-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.94.164.229:50832/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794944, "uuid": "3af46b99-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.175.25.81:53673/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794944, "uuid": "3b0512bc-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.215.7.89:40451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737794944, "uuid": "3b56c17a-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.73.58.74:41966/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795367, "uuid": "37031562-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.85.132:60324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795425, "uuid": "59f34cbc-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.27.163:39178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795426, "uuid": "5a2459d0-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.70:54839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795484, "uuid": "7cdd2392-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.36.155.151:52041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795674, "uuid": "ee802209-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.58.81:37155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795725, "uuid": "0c613964-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.224.198:47469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795784, "uuid": "2ff90939-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.55.89:38275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795786, "uuid": "312c57dc-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.228.145.230:44521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795802, "uuid": "3acc3d75-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.23:46982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795844, "uuid": "53b595a0-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.62.150:57823/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795846, "uuid": "54862257-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.208:37707/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795846, "uuid": "5493c2c4-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.28:42354/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795846, "uuid": "54efa9b5-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.123.210:42512/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795856, "uuid": "5aa1d252-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.200.241:34201/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795856, "uuid": "5ac3a18a-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.13:49498/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795867, "uuid": "6127fb6b-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.112:35860/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795873, "uuid": "64b383f7-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.152.161.222:40791/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795873, "uuid": "64b3c5e6-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.101.214:57540/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795873, "uuid": "64c4668a-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.188:11154/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795873, "uuid": "64d9d653-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.250.103:11459/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795873, "uuid": "64dfe5f6-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.11.132:51260/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795875, "uuid": "6623180c-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.36:41613/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795883, "uuid": "6b0baef9-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.239.143:55175/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795965, "uuid": "9b6dd8cc-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.254.174:34895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737795965, "uuid": "9b780295-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.60.188:52535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796084, "uuid": "e2c5d9f5-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.1.127:35513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796085, "uuid": "e35ddc43-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.148:45036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796101, "uuid": "ecf07acf-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.70:54839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796264, "uuid": "4dbdd81e-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.1.196:36463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796323, "uuid": "712f08d5-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:59678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796444, "uuid": "b916e70a-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.85.132:60324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796450, "uuid": "bc903693-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.129.212:38665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796625, "uuid": "24fddaba-dafd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.199:39185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737796685, "uuid": "48e4bd5a-dafd-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.186.231:37908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797224, "uuid": "8a26f762-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.173.144:51160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797405, "uuid": "f60efd2d-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.249.230:38630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797464, "uuid": "195b09ab-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.60.188:52535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797526, "uuid": "3ddae245-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.180.141.186:38865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797644, "uuid": "843f8d36-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.240.216.78:49854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797645, "uuid": "84e02790-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.211.14:52320/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797646, "uuid": "856310dc-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.31:40600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737797673, "uuid": "958ea2f1-daff-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.200.224.211:46563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798005, "uuid": "5b5af456-db00-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.186.231:37908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798064, "uuid": "7e972437-db00-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.99:41101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798245, "uuid": "ea6a0a9e-db00-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.230.74.17:13559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798304, "uuid": "0e092ddb-db01-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.199:39185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798364, "uuid": "31c631b5-db01-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.244:56749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798485, "uuid": "79bc1f85-db01-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.201:41322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798566, "uuid": "aa30ccc9-db01-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.177:49428/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737798845, "uuid": "50678bf2-db02-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.70.80.82:58511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799326, "uuid": "6eddb551-db03-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.179.137:59098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799445, "uuid": "b5d91d66-db03-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.158.18:46381/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799505, "uuid": "d973dfe9-db03-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.77.65:33251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799505, "uuid": "d98e31b1-db03-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.233:38688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799564, "uuid": "fd0c4ad2-db03-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.243.167:46333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "8c3d9456-db04-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.245.5/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799805, "uuid": "8c3fd428-db04-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.245.5/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799953, "uuid": "e46e6554-db04-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.179:47326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737799988, "uuid": "f9892a94-db04-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://nvntrk.com/wp-includes/blocks/WinSCP_Setup.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800344, "uuid": "cda20dca-db05-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.233:38688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800524, "uuid": "39190215-db06-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.201:41322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800585, "uuid": "5d6604b8-db06-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.88.151:43435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800660, "uuid": "8a2f3b9e-db06-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.54.138:53609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800824, "uuid": "ebda37cd-db06-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.23.84:58283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737800944, "uuid": "33522c11-db07-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.179.137:59098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801186, "uuid": "c352b899-db07-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.125.132:57497/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801245, "uuid": "e6835f9e-db07-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.22.158:33026/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801261, "uuid": "f0642ead-db07-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.17.207:35096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801305, "uuid": "0a796ee5-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.77.65:33251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801365, "uuid": "2e5bc0a2-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.23.178:60729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801384, "uuid": "39bcfe2e-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.27:36026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801500, "uuid": "7e7c2d73-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.179:47326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801544, "uuid": "9936ab06-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.61.130:44866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801665, "uuid": "e102ed56-db08-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.88.151:43435/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801784, "uuid": "27fcbe79-db09-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.230:38820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737801982, "uuid": "9dcf2f09-db09-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.170.105:36292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802026, "uuid": "b80ab4ab-db09-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.252.78:57462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802144, "uuid": "fe69412c-db09-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.171.234:50116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802324, "uuid": "6a204af8-db0a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.162.250:45006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802667, "uuid": "36678fc9-db0b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.218:60395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802684, "uuid": "40b10889-db0b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.61.130:44866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737802984, "uuid": "f33acff7-db0b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.170.105:36292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803064, "uuid": "231af870-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.205:42866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803065, "uuid": "23c22f86-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.81:49898/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803072, "uuid": "2801173d-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.5.41.240:41334/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803300, "uuid": "aff33040-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.126:48658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803419, "uuid": "f6bb5a96-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.92.104:36943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803583, "uuid": "586b21e3-db0d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:59678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803592, "uuid": "5de4efb7-db0d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.1.207:43016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737803885, "uuid": "0c483172-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.188.74:34603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804004, "uuid": "5303d671-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:49035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804004, "uuid": "536b0e23-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.115.235.15:44797/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804004, "uuid": "537b1bdd-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.165.141:47169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804005, "uuid": "54245811-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.251.64.101:59384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804033, "uuid": "6498de8f-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.4.223:49532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804039, "uuid": "6869c3bf-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.28.94:55734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804123, "uuid": "9a7b236b-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.74:56418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804185, "uuid": "bf0aed03-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.252.78:57462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804244, "uuid": "e212db8a-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.238.37:55525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804364, "uuid": "29f8be3c-db0f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.38.206:41976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804432, "uuid": "525cac51-db0f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.205:42866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804486, "uuid": "726467c5-db0f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.92.104:36943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804725, "uuid": "01289ff0-db10-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.126:48658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804905, "uuid": "6c65c7b0-db10-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.199.202:41526/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737804914, "uuid": "71674c54-db10-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.192.27:53540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805100, "uuid": "e0d045af-db10-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.1.207:43016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805384, "uuid": "8a021fc8-db11-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.173.144:51160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805384, "uuid": "8a0221bc-db11-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.165.141:47169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805684, "uuid": "3ce548ea-db12-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.166:59665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805804, "uuid": "8409dd69-db12-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.19.74:47163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737805865, "uuid": "a8b3dbe4-db12-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.119.126:49063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806164, "uuid": "5a98aa80-db13-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.188.74:34603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806406, "uuid": "eac98587-db13-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.192.27:53540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806583, "uuid": "5490aae5-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.108.228:52185/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806585, "uuid": "55b316af-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.81.246.181:51862/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806587, "uuid": "56b3926b-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.103.254.231:51546/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806605, "uuid": "61549c0a-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.80:35640/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806613, "uuid": "6623b7b9-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.168.120.186:44946/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806613, "uuid": "662495c8-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.120:11089/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806613, "uuid": "663dd08b-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.92.190:46898/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806613, "uuid": "66701f21-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.150.84:36074/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737806645, "uuid": "7938d1d8-db14-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.161.141:56483/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807005, "uuid": "504a1538-db15-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.193.158:51554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807125, "uuid": "978779fb-db15-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.119.126:49063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807484, "uuid": "6d5c6f8f-db16-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.111.76:57669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737807909, "uuid": "6ac1cd06-db17-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.3.27.240:42796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808024, "uuid": "af2225d7-db17-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.181.231:41144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808264, "uuid": "3eb04a4a-db18-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.154:34090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808445, "uuid": "aa10907f-db18-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.181.231:41144/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808445, "uuid": "aa146df5-db18-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.193.158:51554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808445, "uuid": "aa927370-db18-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.136.231:45483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808624, "uuid": "14ddbfc5-db19-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.24.154:34090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737808990, "uuid": "ef71edab-db19-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.120.240:33373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809164, "uuid": "56f8746e-db1a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.24.153:53694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809165, "uuid": "57b31b9b-db1a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.251.64.101:59384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809166, "uuid": "580e0f24-db1a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.23.105:59653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809345, "uuid": "c27f911f-db1a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.178.75.240:55233/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737809465, "uuid": "0a621cb8-db1b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.227.157:52756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810064, "uuid": "6f2fa11a-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.9.255.75:35780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810065, "uuid": "6fa13678-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.94.173:41986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810065, "uuid": "6fcd30e2-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:46799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810065, "uuid": "6ff0bdb1-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.30:57899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810093, "uuid": "80871ece-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.41.253:49283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810093, "uuid": "8093d9db-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.155.191:35801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810306, "uuid": "ffb59028-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.232.22:34385/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810364, "uuid": "2256a36d-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.135.243:57098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810365, "uuid": "2271483a-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.92.226.29:54269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810544, "uuid": "8dae2b42-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.120.240:33373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810725, "uuid": "f91bf864-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.23.105:59653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810785, "uuid": "1d038833-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.227.157:52756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737810905, "uuid": "64d1f0fc-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.180.236:45282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811025, "uuid": "ac02eaf4-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.181.17:43724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811171, "uuid": "0328df10-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.219.240.159:46396/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811205, "uuid": "174d988c-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.135.155:38885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "a61c77ce-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811444, "uuid": "a61f080f-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811445, "uuid": "a62c0287-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/arm6", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811445, "uuid": "a62eea4e-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811445, "uuid": "a62f874c-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811445, "uuid": "a6308511-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811504, "uuid": "c9b9ec0e-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/weed", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811565, "uuid": "ee174aae-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.217.37:42799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811593, "uuid": "fe631f6a-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.92.226.29:54269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811684, "uuid": "34e614fe-db20-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.70.73:41961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811686, "uuid": "35d33916-db20-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.24:60736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737811985, "uuid": "e872d56f-db20-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.170.35:52308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812226, "uuid": "77dbddc6-db21-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.63:38311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812284, "uuid": "9a8d237f-db21-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.24:60736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812284, "uuid": "9a9af749-db21-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.243:35281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812706, "uuid": "960ed703-db22-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.166.170:40519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812825, "uuid": "dce3f83e-db22-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.215:40676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812944, "uuid": "23d0156c-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.66.145:54960/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812946, "uuid": "24ea8d22-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.173.220:33230/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737812995, "uuid": "42331151-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.228.16.186:46803/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813124, "uuid": "8f4f6c4f-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.135.243:57098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813243, "uuid": "d6729f70-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.70.73:41961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813244, "uuid": "d6f86f40-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.120.11:41668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813304, "uuid": "fab6aeb1-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.217.37:42799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813305, "uuid": "fb3affe8-db23-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.17.71:12726/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813862, "uuid": "4763d889-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.43:50790/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813905, "uuid": "60817240-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.243:35281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813905, "uuid": "60eb8286-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.244.178.208:43014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813964, "uuid": "83b12056-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.208:48189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737813964, "uuid": "83db9b34-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.116.92:51527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814113, "uuid": "dcc94adf-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.64:37389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814144, "uuid": "ef7a8c37-db25-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.90.96:47439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814207, "uuid": "14b0a419-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.22.1:43915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814265, "uuid": "3720ce45-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.215:40676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814265, "uuid": "37810a77-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.170.35:52308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814325, "uuid": "5acb1985-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.106:47294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814444, "uuid": "a20871fd-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.166.170:40519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814566, "uuid": "ea9a42ba-db26-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.135.155:38885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814746, "uuid": "55e35d47-db27-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.234.228.96:48419/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814748, "uuid": "5721fb3e-db27-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.100.249:38859/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814805, "uuid": "793108a9-db27-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.177.31:44330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814925, "uuid": "c07ba309-db27-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.30:60216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737814995, "uuid": "ea378591-db27-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://destinystealer.com/Release.rar", "Tag": [ { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "StormKitty", "colour": "#9cf321", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815166, "uuid": "50277b6d-db28-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.186:58256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815468, "uuid": "049e5189-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://anzorpasechnik.netlify.app/Amnesia.zip", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815526, "uuid": "26aeebdb-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.106:47294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815526, "uuid": "26aeef05-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.90.96:47439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815527, "uuid": "275853ca-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.58.79:36193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815545, "uuid": "324a1c35-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://anzorpasechnik.netlify.app/AmnesiaBETA.apk", "Tag": [ { "name": "AmnesiaStealer", "colour": "#FDE9F2", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815584, "uuid": "494fc686-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.208:48189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815584, "uuid": "49bc49b2-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.244:49396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815584, "uuid": "49cb1133-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.178.76.48:52847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815783, "uuid": "c005d878-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.164:55179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815824, "uuid": "d85f19d2-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.arm7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815824, "uuid": "d87c7f6b-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.3.94:52077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815824, "uuid": "d8a3caaa-db29-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.42.85:34818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737815960, "uuid": "29c11595-db2a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.142.209:57836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816376, "uuid": "21d1ec41-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.158.112:47957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816545, "uuid": "863441ec-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.254:60327/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816560, "uuid": "8f70d6c4-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.32:43895/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816681, "uuid": "d77b5e9f-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.147.10:37584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737816964, "uuid": "8016af32-db2c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.244:49396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817144, "uuid": "eb87be5f-db2c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.58.79:36193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817266, "uuid": "33fd6bd2-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.178.76.48:52847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817326, "uuid": "57d811e0-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.158.112:47957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817385, "uuid": "7b12aec3-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.186:58256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817385, "uuid": "7b38712e-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.80.67:39173/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817386, "uuid": "7b835867-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.95:43218/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817390, "uuid": "7dcf2b54-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.207.161.101:58607/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817391, "uuid": "7eb04317-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.89.80.222:45186/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817403, "uuid": "85bee216-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.35.246:56459/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8b8ae919-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.251.236:11923/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8bace6c4-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.165.226:45047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8bad33fb-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.168.120.198:41556/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8bca19bc-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.18:57865/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8bd08eed-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.57.52:45988/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817413, "uuid": "8bd173bb-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.117.100.139:33513/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817414, "uuid": "8bfabab0-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.215.57:33453/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817414, "uuid": "8c0b1f89-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.13.51:34219/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817431, "uuid": "96693c6f-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.162.94:52228/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817445, "uuid": "9ec0aab0-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.143:34724/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817445, "uuid": "9ec0cb15-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.65.204:55074/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817805, "uuid": "7559ad59-db2e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.160.172:43154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737817864, "uuid": "9880e6d1-db2e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.39.73:59226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818165, "uuid": "4bf463c3-db2f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.63.30.193:42918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818344, "uuid": "b6585b9c-db2f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.17.121:55660/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818525, "uuid": "22922bfc-db30-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.237.27:5936/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737818709, "uuid": "904963c0-db30-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.149.139:32833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819064, "uuid": "63bc80c3-db31-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.189:38356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819246, "uuid": "d052007e-db31-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.121.137:34938/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819363, "uuid": "16414878-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.102.104.92/sex.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "PING", "colour": "#be4099", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "3a8325e3-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "3a949da6-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "3a964211-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819424, "uuid": "3a9aa692-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819426, "uuid": "3bb79509-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819426, "uuid": "3bba0302-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.arm", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "5e133031-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "5e1531b4-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "5e1aafed-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819484, "uuid": "5e1d4b0d-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819486, "uuid": "5efcc303-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.149.139:32833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819543, "uuid": "8160b71d-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.102.172.203/bins/g4za.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819665, "uuid": "c9e23346-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.208:60249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819670, "uuid": "cd16a801-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/ohshit.sh", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed3b5c77-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed3b6cb6-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed3b6cc5-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed3c4106-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed40d4f2-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819724, "uuid": "ed56b65d-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.arm", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819725, "uuid": "ed9aa97c-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819726, "uuid": "ee24865a-db32-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "10c40e67-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "10ca8843-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "10cc4ef2-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819784, "uuid": "10d066cf-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.62.226.5/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819843, "uuid": "341d3983-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.59.197.136/yarn", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819843, "uuid": "343921d4-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.59.197.136/pay", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819903, "uuid": "580f3def-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.59.197.136/bin", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819903, "uuid": "58157e8c-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.59.197.136/sora.sh", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737819904, "uuid": "58862576-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.59.197.136/bins/sora.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "BLIZZARD-NET", "colour": "#4e68a6", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820043, "uuid": "aaffad80-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.42:54319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820182, "uuid": "fe0efee8-db33-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.99.164:37750/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820386, "uuid": "779c2910-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.13:49894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "9a46e226-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "9a486906-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "9a4b7446-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "9a4c4e63-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820444, "uuid": "9a5274a7-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820445, "uuid": "9aa5e2c5-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.51.222:44868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820445, "uuid": "9ad5c2d2-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bdda669c-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bddf2d9f-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bde23d03-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bde3df8c-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bde91df9-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820504, "uuid": "bdf02cb7-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/hiddenbin/boatnet.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820505, "uuid": "beb26c52-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.195.229:55042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820572, "uuid": "e687de16-db34-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:33550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "05522d28-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "0563895b-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "057d7b21-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "0580246d-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820624, "uuid": "058239d7-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820685, "uuid": "29dfbeff-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d510e80-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d5113d4-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d5a1027-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/harm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d5ad736-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d5e7d9e-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d6209e4-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d6270f0-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d629d34-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820744, "uuid": "4d643ae0-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d6a6efd-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d6a9aa3-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d6c4525-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d6f9d06-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d71dc04-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d74974e-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d7a7c6b-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820745, "uuid": "4d9ded43-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820746, "uuid": "4e0d92c1-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.78.198.51:54636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820804, "uuid": "711941d7-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68:8080/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820863, "uuid": "9438d9c9-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:33550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737820925, "uuid": "b941476e-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.141.38:45531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821043, "uuid": "ff7f6536-db35-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.233.148.213:44231/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821105, "uuid": "248c9fd4-db36-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.210.186:38017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821106, "uuid": "249e9f79-db36-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.60.152:44504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821164, "uuid": "4791ca8e-db36-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.64.192:38332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821405, "uuid": "d70c7349-db36-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.105.59.51:47737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821644, "uuid": "65a5b0cb-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.144.167:46944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821645, "uuid": "6627509c-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.59.212:55687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821704, "uuid": "898b412a-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.210.186:38017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821704, "uuid": "899238d4-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.141.38:45531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821729, "uuid": "98461fdb-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.94:36945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821765, "uuid": "ada53bd7-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.42:54319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821765, "uuid": "adef05d1-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.4.201:36725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821824, "uuid": "d115fe02-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.51.222:44868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821884, "uuid": "f4877c77-db37-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.113.107:33787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821944, "uuid": "188f573c-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.240:35809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737821945, "uuid": "19031a5b-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.24.98:40959/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822021, "uuid": "4680063c-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.242.232:48370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822064, "uuid": "5faa23a8-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/rte", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822064, "uuid": "5fac00c8-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/rtz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822129, "uuid": "8698249a-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.173:48164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86925f6-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/b", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86929d6-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/linksys", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8693491-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/c.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86954c4-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/runtime", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86b2e52-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/adb", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86bf6b8-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/aaa", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86d4360-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/li", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86d4906-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/lll", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86e11e4-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/vc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86fcc19-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/toto", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a86fd99e-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/g", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8714952-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/z.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8714bca-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/w.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8736a33-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.189:38356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a877ed71-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/mag", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a877f97a-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/sdt", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a878035f-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/multi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8781045-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/gocl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a878c95d-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/fdgsfg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a87ab217-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/fb", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a87ac70b-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/test.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a87bf906-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/ipc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a87bfe90-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/xaxa", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a87ff353-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/bx", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a887f681-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/ruck", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a88e0dd8-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/weed", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a88e4748-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/jaws", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a893fb9b-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/f5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a894d7d3-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/irz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8957fb7-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/k.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a895a752-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/wget.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a89cc793-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/create.py", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8a8c3b3-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8b561ea-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/get.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822186, "uuid": "a8c78105-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/zz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef5fddf6-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef622953-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef69cbcf-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/av.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef6b917c-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/asd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef6e93d2-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef8ad252-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef929c68-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef931f4b-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef94db6e-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef994120-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822305, "uuid": "ef9df48c-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "efdbc136-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822306, "uuid": "efe5a2a2-db38-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822364, "uuid": "12718987-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "377a0022-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "377c4dda-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/runtime", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37847da5-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37854cee-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37880b56-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "378c5fbd-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37a6664a-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37a82ea8-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/g", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37a99374-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37a9fb6d-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37b370f7-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/w.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37b40d68-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37b44263-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37b932e0-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/z.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37b9ec0b-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37c057cb-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/irz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37c1bbcc-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/mag", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37c1d9e8-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/jaws", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37c20f77-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/wget.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e7022e-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/vc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e71669-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/av.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e77b62-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/toto", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e7d4ff-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/linksys", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e7e03d-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/ipc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37e7f1a7-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/bx", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822426, "uuid": "37f1d0eb-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/test.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "37f37b49-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/sdt", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "37f3fc10-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/b", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "37f76a84-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/li", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "37f7e152-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/fb", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "37f8ab07-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/lll", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "38010cdb-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/adb", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "38090dda-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/gocl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "38091219-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184:8080/z/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "3809fc7c-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/c.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "380efdba-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/fdgsfg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "380f8044-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/multi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "3811c5fd-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/aaa", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "38138285-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822427, "uuid": "3813fb79-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/k.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38c9723c-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/zz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38ce6624-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38cf146b-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/xaxa", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38cffcfe-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/f5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38d0e66f-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/asd", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38d20708-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/get.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38d64ccf-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/weed", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38d71196-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/ruck", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38dce3ff-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/create.py", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822428, "uuid": "38e2c00f-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/z/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822483, "uuid": "59d965f4-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/rte", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822483, "uuid": "59e6b092-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.184/rtz", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822725, "uuid": "ea0260c8-db39-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.13:49894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822784, "uuid": "0d37d258-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.15.202:57208/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822784, "uuid": "0d3c0c61-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.30:60216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822785, "uuid": "0d5c6527-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.227.201.153:46712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737822785, "uuid": "0d98d172-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.191:51538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823025, "uuid": "9ca19c61-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.30.130:50917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823204, "uuid": "07966091-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.113.107:33787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823205, "uuid": "0806217b-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.179.147:34665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823403, "uuid": "7df96ca7-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.62.6:56895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823444, "uuid": "9656bec4-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.115:43485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823564, "uuid": "dde90186-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.20.152:42739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823624, "uuid": "01a38a14-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.54.141:39269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823625, "uuid": "0263d281-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.155:50526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823692, "uuid": "2a6354a6-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.117:41579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823864, "uuid": "90cba61f-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.72.211:11006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823864, "uuid": "90f16463-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.240.185:55135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737823984, "uuid": "d86f3497-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.59.212:55687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824044, "uuid": "fc56dc5f-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.79.219.118:51911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824224, "uuid": "672b4dac-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/payload.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824224, "uuid": "67308e12-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/wget.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b149d02-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.54.141:39269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b1c7789-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b1c86ef-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b1c9e64-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b1dd179-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b249e18-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b274646-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b2747e5-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b2ccc05-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824284, "uuid": "8b2e040f-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824343, "uuid": "ae57f1aa-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824345, "uuid": "af2ac062-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.144.167:46944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824404, "uuid": "d29a9817-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.177/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6db4e7a-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6dbe9a7-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6df2c00-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6df2e85-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6e1be30-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6e1d5f0-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6e509d9-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6e73745-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f6e9e17d-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824465, "uuid": "f7134ada-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824466, "uuid": "f772ae53-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824524, "uuid": "19e24cb0-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/payload.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824524, "uuid": "19e24cb7-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.floppaonyou.fr/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824584, "uuid": "3dc726c9-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.179.147:34665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824647, "uuid": "639f6822-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.95.215:54775/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824674, "uuid": "735007a1-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.64.120:52990/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824705, "uuid": "85de35a7-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.111:36501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737824884, "uuid": "f0e8a4e8-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.235:37231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825005, "uuid": "389cc91f-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.232.254.250:43354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825185, "uuid": "a459f830-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.59.158:37938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825304, "uuid": "eb5b90a9-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.20.152:42739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825305, "uuid": "eb7a9ed2-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.72.211:11006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825327, "uuid": "f89909d3-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.191.162:51608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825544, "uuid": "7a689060-db40-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.107:57563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825545, "uuid": "7acfcd66-db40-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.126.61:36659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825559, "uuid": "8310a1bf-db40-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.201:53078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737825634, "uuid": "afa7fd44-db40-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.197.21:39443/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826024, "uuid": "9858c09f-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.245.5/jack5tr.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "bc5c1b4c-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826085, "uuid": "bcdd4395-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.245.5/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "bd178857-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "bd4f7136-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "bd713882-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826086, "uuid": "bd74a9eb-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "bdad28e1-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "bdb5421a-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "bdbb35d4-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "bdc01afb-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826087, "uuid": "bdd6c1e1-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "be6d936c-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826088, "uuid": "be702254-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826093, "uuid": "c10e38a9-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826145, "uuid": "e00ee363-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/w.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826145, "uuid": "e0135377-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/jack5tr.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826145, "uuid": "e01faa80-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826145, "uuid": "e094dd79-db41-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.daudau.org/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4b9729dc-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae40f7-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae4264-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae490d-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae49de-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae4ca7-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.i486", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae50ce-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae7073-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.sh", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae7f71-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae83da-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.i686", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae852f-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae854c-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826325, "uuid": "4bae8618-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f644522-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f66d595-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f6a7020-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.i686", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f6a7022-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f6f3d5a-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f802130-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f8025cd-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f802618-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.i486", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f829a89-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f82a191-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f82b115-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.x86_64", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f82b447-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f850f61-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f851059-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f851583-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.x86_64", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f87a8bb-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f8d0ef9-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy/Fantazy.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826385, "uuid": "6f91b9b0-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.fantazy.space/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ChernobylBotnet", "colour": "#1f3c0e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826386, "uuid": "6fbf4b5b-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.196.10.170/RywCbC", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826389, "uuid": "72098830-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.240:8080/test.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826480, "uuid": "a7c58fdd-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.196.10.170/PJppQfeLk.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b61ed4e6-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/Bj.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b626f820-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/Gold.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b633ef70-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/chave.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b63501e7-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/chave.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b6460df1-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/Cliente.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b64cac85-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/sc.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826504, "uuid": "b664c442-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/New.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "b71c067b-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826505, "uuid": "b7242c91-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/chavenave.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "b74e815d-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://solve.xgnv.org/awjsx.captcha", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "b75145be-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.67.239:55527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "b7b446e5-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/nw.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826506, "uuid": "b7b6f100-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.240:8080/Update.exe", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "b82dc40b-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/new2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "b82dcaa7-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/Gold.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "b835bd2c-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.194.131:36337/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826507, "uuid": "b8643ef3-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/cliente.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "b88c488d-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.5.42.207:5080/chisel_a5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "b895b924-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.217.228.211:8080/arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826508, "uuid": "b8de4a1f-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/ni.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "b904b461-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.5.42.207:5080/chisel_a5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "b908b308-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.5.42.207:5080/chisel_a7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826509, "uuid": "b942581e-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.5.42.207:5080/chisel_a7.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "ba80d3c8-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.217.228.211:8080/mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826511, "uuid": "bac7605d-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.217.228.211:8080/mips.bak", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826554, "uuid": "d404757b-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.149.189.221:401/Chave24.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826624, "uuid": "fdf487cf-db42-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.214:54308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826684, "uuid": "217f7e95-db43-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.59.158:37938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826805, "uuid": "69948dec-db43-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.111:36501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826864, "uuid": "8ccf80cd-db43-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.107:57563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737826864, "uuid": "8d079b06-db43-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.176.101.111:45328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827225, "uuid": "63fc3c3f-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.126.61:36659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827344, "uuid": "aaf54f01-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.88.151:43435/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827345, "uuid": "aba3aed1-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.8:36863/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827405, "uuid": "cf714114-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.12.23:59078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827417, "uuid": "d65d8c5e-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.72.178:42213/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827417, "uuid": "d686a3e2-db44-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.106.29:55947/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827524, "uuid": "168f65f4-db45-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.144.230:39844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737827824, "uuid": "c8d8de84-db45-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.12.23:59078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828005, "uuid": "34bc0a71-db46-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.94.106:48965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828245, "uuid": "c429c3eb-db46-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.250.10.44:43332/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828246, "uuid": "c4ed2309-db46-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.106.100.87:38596/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828260, "uuid": "cd325bdf-db46-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.120.215:39397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828286, "uuid": "dc550461-db46-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.80:55312/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828425, "uuid": "2f5dff45-db47-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.58.37:44487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828724, "uuid": "e1c222e2-db47-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.241.231:35485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828724, "uuid": "e1ceb322-db47-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.201.127:53271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828784, "uuid": "05450643-db48-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.140.20:42533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828812, "uuid": "1644351f-db48-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.131.73:55240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737828964, "uuid": "709283b9-db48-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.144.230:39844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829145, "uuid": "dcb01252-db48-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.115.235.92:47075/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829640, "uuid": "03674562-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.189.35:51936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829744, "uuid": "41b10b28-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.178.222:54434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829745, "uuid": "41f9f55a-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.94.106:48965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829745, "uuid": "42376059-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.122.50:59393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829747, "uuid": "433bf57f-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:46799/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829752, "uuid": "46833968-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.179.249.55:46381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829864, "uuid": "88deec76-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.45.73.229:36722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829865, "uuid": "89ad01f2-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.122.158:59750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737829924, "uuid": "acf2bc77-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:43787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830107, "uuid": "199c78e2-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.100.35:39513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830224, "uuid": "5fe4dc55-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.241.231:35485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830465, "uuid": "eefc136a-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.187.232:50867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830833, "uuid": "ca682032-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.250.11:35225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830884, "uuid": "e9193d78-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.142.209:57836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737830885, "uuid": "e9b62ec7-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.105.12:38278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831198, "uuid": "a40a03cc-db4d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.252:38742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831424, "uuid": "2aab10f7-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.141.56:58415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831425, "uuid": "2b2fb7f1-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.122.158:59750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831544, "uuid": "72aaabc3-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.47.122:34268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831605, "uuid": "96c3e891-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.187.232:50867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831693, "uuid": "cb17e9b1-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.109.120/jfeeps", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831845, "uuid": "2595d5c9-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.115.233.77:33666/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831847, "uuid": "26e5f6c1-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.64.155.152:41145/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "6cb836dc-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831964, "uuid": "6cbebc57-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "6d985d30-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737831965, "uuid": "6d985e5a-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "9145cc2b-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "9145e1cb-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "9148ecd6-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "914c1c40-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832025, "uuid": "91517044-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "b433ab0a-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832084, "uuid": "b476e227-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.238.156/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832085, "uuid": "b4c6e720-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.27.247:34993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832105, "uuid": "c0c7bd3e-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.99.50:41656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832446, "uuid": "8bcbb439-db50-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.176.101.111:45328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832447, "uuid": "8cc98341-db50-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.250.11:35225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832626, "uuid": "f72e9a5b-db50-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.86.43:43379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832745, "uuid": "3e24e266-db51-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.136.254:47893/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832808, "uuid": "63e89782-db51-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.23.100:44012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832924, "uuid": "a8e93fec-db51-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.155.72/1.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737832933, "uuid": "ae4d4c40-db51-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.74.22:58414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833202, "uuid": "4e613271-db52-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.201.85:37122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833465, "uuid": "eb586c8e-db52-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.99.50:41656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833525, "uuid": "0f27bbee-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.86.43:43379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833644, "uuid": "563abca7-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.205.38:47873/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833644, "uuid": "566449fa-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.117:49997/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e530e8d2-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e5313c2d-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e536d858-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e53c1978-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e541b2dd-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e545c63d-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e5496fff-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e54e5e99-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e5554d8b-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e5558218-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e555d032-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833884, "uuid": "e5575372-db53-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737833944, "uuid": "08a9d1a4-db54-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834004, "uuid": "2cc3ee7e-db54-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.200.78.35/fuck.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834130, "uuid": "7795486e-db54-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.77.211:42544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834184, "uuid": "982ecdcf-db54-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.23.100:44012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834213, "uuid": "a91d9b5c-db54-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.116.41:38970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834545, "uuid": "6f024552-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.236.238:56971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834545, "uuid": "6f5e351b-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.149.86:54658/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834546, "uuid": "6f96d25d-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.127:52277/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834604, "uuid": "926f3001-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.45.73.229:36722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834607, "uuid": "942ed568-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.173.124:45144/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834665, "uuid": "b66aa18c-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.233:53369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834724, "uuid": "da1002e4-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.153.182:59587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834784, "uuid": "fd8729df-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.96.142.40:50214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834785, "uuid": "fe26f40f-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.179.220.195:63177/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834785, "uuid": "fe2fe258-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.209.236.49:54034/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834785, "uuid": "fe73d77a-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.155.92.203:3956/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "fe89cf6b-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.7.151:34753/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "feb37f0f-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.64.65.248:28049/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "fed6bc68-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.204.218.147:4548/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "fee77079-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.45.156:1224/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "feea4acc-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.131.160.149:5986/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834786, "uuid": "feea4e78-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.72.52:20742/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff203b3e-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.79.103.5:49707/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff27d5d7-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.10.22:5222/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff2a1248-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.19.47.31:10892/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff5eb54f-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.235.186.48:5854/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff7a706b-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.136.195.193:60963/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834787, "uuid": "ff7b9c98-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.84.30.164:43046/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834788, "uuid": "ffe02a66-db55-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.235.244.250:7888/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737834813, "uuid": "0eca3ac9-db56-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.25.132.143:34417/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835325, "uuid": "403454a2-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.85.119:47166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835396, "uuid": "6a1f3a2c-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://nicostudio.it/pZJHqter.txt", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835507, "uuid": "ac75f8c3-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.191.81.142:58082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835563, "uuid": "ce03361d-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.64.207:35913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835564, "uuid": "ce5af2c0-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.153.230:49421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835624, "uuid": "f22f4fce-db57-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.240.171:42163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835830, "uuid": "6d4b438f-db58-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.207:59510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737835924, "uuid": "a4ee81a5-db58-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.153.182:59587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836104, "uuid": "109f3dae-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.236.238:56971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836345, "uuid": "a0107905-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.189:50154/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836404, "uuid": "c311192b-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.181.232.67:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836405, "uuid": "c3a5b7a1-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.146.23/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836405, "uuid": "c3e51e11-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.155.84/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836406, "uuid": "c47ad611-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.152.118.76:82/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836406, "uuid": "c49bab95-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.246.87.12:1083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c4c48bea-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.148.213/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c4e23082-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.161.141.219:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c4ec9ed6-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.225.236:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c4eea7a0-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.238.225:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c4fb17a2-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.160.236:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c51a7cd3-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.186.52/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c52e2370-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.66.167:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836407, "uuid": "c52e99db-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.185.15/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836409, "uuid": "c5e2ebbc-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.186.143.166:37773/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836414, "uuid": "c8e7577b-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.217.110.149:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836422, "uuid": "cdb14ffd-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.28.3:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836423, "uuid": "ce536a39-db59-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.135.87:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836552, "uuid": "1b94f363-db5a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.105.96:43797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836765, "uuid": "9a92ff13-db5a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.227.11:35962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836944, "uuid": "04cfd648-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.225.17.58/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836945, "uuid": "057e4a65-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.154.8:60233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737836961, "uuid": "0f45a011-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.232:46350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837005, "uuid": "29b05ad6-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.165.84:60053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837007, "uuid": "2aa5c807-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.212.103:42269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837033, "uuid": "3a35221d-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.219.244:56884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837065, "uuid": "4ce5ac34-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.27:49226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837124, "uuid": "7092d586-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.85.119:47166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837185, "uuid": "94e839d1-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.191.81.142:58082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837424, "uuid": "23438c14-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.87.76:50977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837424, "uuid": "236ed14b-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.0.46:37389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837425, "uuid": "2373e3b3-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.189:36479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837724, "uuid": "d6338e95-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.105.96:43797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737837725, "uuid": "d6ab3a4f-db5c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.207:59510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838264, "uuid": "18030057-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.227.11:35962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838446, "uuid": "840e3dfe-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.78.207:57961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838565, "uuid": "cafb30c8-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.189:36479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838624, "uuid": "ee5cd05e-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.165.84:60053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838643, "uuid": "f972e5fb-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.111.145:60665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737838985, "uuid": "c54b693c-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.84:40011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839012, "uuid": "d5b1fd5b-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.65.175:59045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839045, "uuid": "e996a37a-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.201.124:57366/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839046, "uuid": "e9a56d72-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.227.17:57133/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839046, "uuid": "e9d8a23b-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.70.80.82:58511/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839047, "uuid": "ea3ea067-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.10.105:49570/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839047, "uuid": "ea7fb8ec-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.240.218:44932/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839048, "uuid": "eb0726a0-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.231:46207/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839050, "uuid": "ec0b3940-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.112.241:43570/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839060, "uuid": "f26b3df3-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.232:36855/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839062, "uuid": "f36093b1-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.240:37461/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839067, "uuid": "f6afde5b-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.104.50:33827/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839073, "uuid": "fa286bd8-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.99:11483/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839073, "uuid": "fa29b1d7-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.106:11529/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839074, "uuid": "fa5b93a5-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.85:10371/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839122, "uuid": "171b651a-db60-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.129.161:40940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839225, "uuid": "54d06a4a-db60-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.212.103:42269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839346, "uuid": "9cff5ab5-db60-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.33.31:57473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839482, "uuid": "ed8ce893-db60-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.127:47667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737839585, "uuid": "2b2b3e70-db61-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.219.244:56884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840125, "uuid": "6d5abd08-db62-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.176.107:33769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840184, "uuid": "904a1b4a-db62-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.111.145:60665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840247, "uuid": "b5dee016-db62-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.161.118.65:46304/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840711, "uuid": "ca7202a3-db63-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.48:54448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840785, "uuid": "f641888d-db63-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.176:42706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840845, "uuid": "1a3c9538-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.121:44351/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840845, "uuid": "1a3dba9c-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.131.245:55911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840845, "uuid": "1a438601-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.43:38657/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840874, "uuid": "2b6134d0-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.150.183:34706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737840969, "uuid": "642fd303-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.209.199:49039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841144, "uuid": "ccab3af4-db64-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.121.67:38717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841325, "uuid": "3862c089-db65-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.84:40011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841326, "uuid": "38ecf5be-db65-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.21.14:45483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841384, "uuid": "5babf727-db65-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.214:59682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841505, "uuid": "a395c0ab-db65-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.125:56828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841564, "uuid": "c6b06fef-db65-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.176.107:33769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841685, "uuid": "0eba50d1-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.214:54308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841744, "uuid": "3252bfd8-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.33.53:55849/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841744, "uuid": "3257ab9d-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.85:34051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841745, "uuid": "326d5b1b-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.6:39243/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841805, "uuid": "56879ddc-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.63:38311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737841868, "uuid": "7bd5f0ea-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.220.164.196:40890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842013, "uuid": "d23c19e2-db66-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.179.249.55:46381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842284, "uuid": "743b6b69-db67-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.121.67:38717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842343, "uuid": "975099a0-db67-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.131.245:55911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842363, "uuid": "a30102f0-db67-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.177.0:60538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842542, "uuid": "0da0d523-db68-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://emorista.org/libraries3.aspx", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "loader-module", "colour": "#b0b10b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842645, "uuid": "4b1c1818-db68-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.209.199:49039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842764, "uuid": "92288b42-db68-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.13:60009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842825, "uuid": "b646f745-db68-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.10.116:38795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842884, "uuid": "d9a844cd-db68-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.176:42706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842960, "uuid": "07094c94-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.56.62:36157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737842963, "uuid": "08d0db12-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.67:56767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843004, "uuid": "215c5782-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.181.17:43724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843064, "uuid": "45113b2f-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.85:34051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843080, "uuid": "4e9de002-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.82.215:58931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843124, "uuid": "689eadba-db69-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.151.49:50283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843424, "uuid": "1b5b11ec-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://emorista.org/kernel86.aspx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843425, "uuid": "1c480a5f-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://link.storjshare.io/s/juyvwcout7cnsklzqw2cstsyq3jq/test/Lc2.exe?download=1", "Tag": [ { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843664, "uuid": "aa58a8c2-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.159.113.43/libraries3.aspx", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843674, "uuid": "b0a8679e-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.113.190:56913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843818, "uuid": "065aca7c-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.159.113.43/libraries3.aspx", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843844, "uuid": "158e78f7-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.159.113.43/kernel86.aspx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843844, "uuid": "158e9825-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.159.113.43/kernel86.aspx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843844, "uuid": "160ae9f2-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://emorista.org/kernel86.aspx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843845, "uuid": "1620f3ff-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.106.52:35421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843845, "uuid": "1666c858-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://emorista.org/libraries3.aspx", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843845, "uuid": "16873abe-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.125:56828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843846, "uuid": "16aea2a6-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.111.102:46116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843846, "uuid": "172065d4-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.74.131:46059/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843905, "uuid": "39ef6e7c-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.138.255:52186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843905, "uuid": "3a1b7609-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.234.188.107:44053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843905, "uuid": "3a2258af-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.63.187:49882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843905, "uuid": "3a2b2b32-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.129.212:38665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843905, "uuid": "3a6ca2c8-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.77:35148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843906, "uuid": "3a91f482-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.247.249:37854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843906, "uuid": "3aa53a6d-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.98.110:59768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843964, "uuid": "5d5981e0-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.240.171:42163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843964, "uuid": "5d5efd0c-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.156.217:43636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737843965, "uuid": "5e1739ff-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.46.20:51569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844085, "uuid": "a578cddf-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.194.171:55281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844206, "uuid": "ed947cb8-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.220.164.196:40890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844206, "uuid": "eda15638-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.46.20:51569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844325, "uuid": "3470ebd4-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.82.215:58931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844413, "uuid": "69221e35-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.56.62:36157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844443, "uuid": "7b1502b9-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.77.65:33251/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844445, "uuid": "7c22e475-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.0:59072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844505, "uuid": "9fc64ff0-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.194.171:55281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844565, "uuid": "c35a2b35-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.151.49:50283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844640, "uuid": "f05fe32a-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.81.90:56037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844644, "uuid": "f2ce446a-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.79:51062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844745, "uuid": "2ee6e109-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.66.38:59758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844881, "uuid": "80054c57-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.8.157:39803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844984, "uuid": "bd68921c-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.247.249:37854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737844999, "uuid": "c60548f2-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.79.159:36637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845163, "uuid": "27dea621-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.147.40.18:54308/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845165, "uuid": "28f25d4f-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.234.107.150:38775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845182, "uuid": "332ebaf0-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.210.141:51887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "39b4b109-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.121.114:44635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "39b56541-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.30:34803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "39b569f7-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.240.216.78:49854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "39e98388-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.27.230.162:56231/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "3a0a07fd-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.70.141:60672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845193, "uuid": "3a2094f4-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.154.131:53864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845211, "uuid": "4473365d-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.169.95:59280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845224, "uuid": "4c46ad39-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.14.115:57340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845224, "uuid": "4c7b41fc-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.246.23.138:34037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845224, "uuid": "4c93e9e6-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.16:36450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845224, "uuid": "4c948439-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.172:51006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845225, "uuid": "4cae8a98-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.145:38486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845228, "uuid": "4e7d2605-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:46799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845238, "uuid": "549ce210-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.100.248:44012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845284, "uuid": "6fd8ad0f-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.66.38:59758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845285, "uuid": "7062c8ce-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.13.21:33659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845344, "uuid": "93ccbb97-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.177.0:60538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845346, "uuid": "94e72636-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.142:60536/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845362, "uuid": "9e893942-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.231:41806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845417, "uuid": "bf598333-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.227.89.114:40790/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845482, "uuid": "e63e5cff-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.70.89:54917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845524, "uuid": "fefcb983-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.35:39840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845524, "uuid": "ff68c83d-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.48:41276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737845765, "uuid": "8ecf9813-db6f-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.231:41806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846005, "uuid": "1de2a87c-db70-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.45.79:51062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846124, "uuid": "64f578d1-db70-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.83.248:52692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846306, "uuid": "d1108191-db70-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.40.96:33437/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846306, "uuid": "d12d31a0-db70-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.166:39755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846310, "uuid": "d3615f1d-db70-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.52.13:43225/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846489, "uuid": "3e2917c2-db71-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.113.190:56913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846680, "uuid": "b01539ac-db71-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.192:48500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846725, "uuid": "cab80c69-db71-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.48:41276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846784, "uuid": "ee12dd58-db71-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.35:39840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737846968, "uuid": "5bc99041-db72-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.79.159:36637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847025, "uuid": "7da7e857-db72-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.13:60009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847145, "uuid": "c568c76f-db72-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.240.116:50453/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847146, "uuid": "c5b69130-db72-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.130.236:36623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847205, "uuid": "e90dfc47-db72-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.244:56749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847325, "uuid": "306891b2-db73-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.172:52542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737847625, "uuid": "e35d8355-db73-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.166:39755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848045, "uuid": "dd814151-db74-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.204.34:45567/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848344, "uuid": "8fd9068c-db75-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.12.179:43525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848373, "uuid": "a107e7b3-db75-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.210:37465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848705, "uuid": "673e2413-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.126.225:49003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848705, "uuid": "67429b03-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.0.198:48390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8943212d-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8944e32a-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8944e461-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "89465de2-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "894678f5-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "89469547-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8946962a-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8947f458-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "8948444f-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "894b1399-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "894b1d72-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "894b49c8-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848762, "uuid": "894e1cde-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89992462-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "899ed7b8-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89a005cf-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89a01490-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89a97b5e-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89b2bd56-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89ce8f92-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89d0ecf3-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89e125b3-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89e1d52e-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89e319af-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89e5777f-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.129/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89e598e4-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848763, "uuid": "89ece724-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.mips.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848764, "uuid": "8a06b449-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1737583681_4d625ca6d1ba8c70330eed3833349d17/firmware.safe.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848764, "uuid": "8a4d0235-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.125.184/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848766, "uuid": "8bc790eb-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848766, "uuid": "8bcd790d-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848766, "uuid": "8bcdc941-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848766, "uuid": "8bceda20-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bd1850f-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bd36230-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bdb0ef0-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bdb128c-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bdb2d8f-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bdc746a-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8be21064-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8be2b602-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8be7370a-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8be99eac-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8becadbd-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bf76637-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.128.105.142/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8bfbd3f8-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c070171-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c08a0ad-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c08f35b-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c1014ef-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c129953-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c147bc0-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c1a8792-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.33.172:43617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848767, "uuid": "8c1ab7ed-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.31/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848792, "uuid": "9b2b6f83-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.113.47/ss/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848792, "uuid": "9b2b73fd-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.113.47/ss/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848824, "uuid": "ae4cb9aa-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.172:52542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848825, "uuid": "aef88d38-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.230.137:46699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848853, "uuid": "bf1e5766-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848853, "uuid": "bf20b102-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848853, "uuid": "bf20b190-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848861, "uuid": "c3d751c4-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.112.166/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848884, "uuid": "d201e164-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.130.236:36623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737848945, "uuid": "f61136b6-db76-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.39:55852/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737849005, "uuid": "1a229ddd-db77-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.11.95:55822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737849201, "uuid": "8e983151-db77-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.198.170:60886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1737849544, "uuid": "5b6b243f-db78-11ef-a9ce-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.145:38486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764163, "uuid": "8ff087fa-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.188.86.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828423, "uuid": "2de8358b-db47-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.58.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769923, "uuid": "f9555125-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.99.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769382, "uuid": "b735ea40-dabd-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.191.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811982, "uuid": "e6d43137-db20-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.170.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0998314d-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.188.117", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7372e-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.11.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "540893f6-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.92.190", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83ae177-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.112.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "099805f0-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.113.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799f613b-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.72.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "540896ab-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.72.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7da36-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0997d5c4-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a74d0b-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.36", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737774243, "uuid": "0829c6b1-dac9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "09978c12-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.73", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83acfd2-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.104.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846303, "uuid": "cfa42dce-db70-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.247.52.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843662, "uuid": "a97d4ff7-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.56.113.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815582, "uuid": "48741a00-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.178.76.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797523, "uuid": "3c2b27d5-daff-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.180.141.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843843, "uuid": "151411c5-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.181.111.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7ae39-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.101.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801182, "uuid": "c161c77e-db07-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.125.132", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818522, "uuid": "20b5cdc0-db30-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.237.27", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823862, "uuid": "8f88f228-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.240.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcae7d58-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.72.52", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764103, "uuid": "6ca36ff1-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.57.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "79a05c77-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.162.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771363, "uuid": "53896146-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.111.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842342, "uuid": "96a0d795-db67-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.177.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737798242, "uuid": "e909ed84-db00-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.230.74.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737766142, "uuid": "2c0bc717-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.2.148", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770942, "uuid": "58c751a9-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.141.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815942, "uuid": "1ee1c858-db2a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.142.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801963, "uuid": "92a04e81-db09-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.170.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcb0ad76-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.45.156", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843963, "uuid": "5c78a099-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.46.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822783, "uuid": "0c27a3d4-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.227.201.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7573c-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.62.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829862, "uuid": "88039417-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.122.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824643, "uuid": "60f8a76a-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.64.120", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764227, "uuid": "b6242a9a-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.60.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814743, "uuid": "5429ac97-db27-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.234.228.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799f2995-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.207.161.101", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841862, "uuid": "78906fbc-db66-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.220.164.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794463, "uuid": "1c702494-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.1.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840843, "uuid": "18fdac07-db64-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.151.121", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771363, "uuid": "538963f1-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.155.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829743, "uuid": "40b8536d-db4a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.122.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737774783, "uuid": "49fe6e7d-daca-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.27.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737780303, "uuid": "2450f252-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.64.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848762, "uuid": "89341149-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.33.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737782162, "uuid": "78b97bf1-dadb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.106.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823203, "uuid": "068e58d3-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.179.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822783, "uuid": "0c27923f-db3a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.48.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770462, "uuid": "3ae07678-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.51.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737792542, "uuid": "a39b88fa-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.144.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812282, "uuid": "9945416d-db21-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.145.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784862, "uuid": "c2036e24-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.3.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815523, "uuid": "25594c68-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.58.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799f4a96-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.13.51", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772443, "uuid": "d7658308-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.88.156", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811022, "uuid": "aa5b4266-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.181.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737774243, "uuid": "0829d3eb-dac9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.181.97", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737803883, "uuid": "0b026369-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.188.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c23865a0-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.185.15", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c237bedd-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.186.52", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737802323, "uuid": "6908a017-db0a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.162.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737808982, "uuid": "ea8f771d-db19-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.248.120.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787743, "uuid": "76be3d4a-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.181.236", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794942, "uuid": "39f80bb4-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.73.58.74", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839103, "uuid": "0bac8c90-db60-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.129.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840843, "uuid": "18fde707-db64-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.150.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765422, "uuid": "7eda8755-dab4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.173.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790443, "uuid": "c00dba81-daee-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.143.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834543, "uuid": "6da771a5-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.165.127", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812222, "uuid": "75db3f88-db21-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.174.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c91b10-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.169.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804902, "uuid": "6abd989e-db10-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.192.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800642, "uuid": "7f9afecc-db06-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.54.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777542, "uuid": "b6d488f8-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.237.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772443, "uuid": "d76577c4-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.85.253", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770642, "uuid": "a5f91cb5-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.237.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765842, "uuid": "7935241d-dab5-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.160.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784623, "uuid": "3361d347-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.163.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778742, "uuid": "822aee59-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.167.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789542, "uuid": "a783a84c-daec-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.170.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737825303, "uuid": "ea764cf9-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.191.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c2392ddd-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.135.87", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787322, "uuid": "7c49aae0-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.176.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829622, "uuid": "f8d54c16-db49-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.189.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786482, "uuid": "87822ddc-dae5-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.20.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845462, "uuid": "da46b687-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.70.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763203, "uuid": "541c718d-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.77.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790622, "uuid": "2b14ee69-daef-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.215.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737785522, "uuid": "4b6d430f-dae3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.35.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820143, "uuid": "e6a72342-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.99.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832023, "uuid": "8fa6adcc-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.99.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769862, "uuid": "d55828be-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.1.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737780543, "uuid": "b34454fa-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.112.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821703, "uuid": "889b43b3-db37-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.121.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801363, "uuid": "2cfa30e5-db08-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794283, "uuid": "b0d65dca-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795782, "uuid": "2eb30efd-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.240.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831182, "uuid": "9adb5e7d-db4d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.240.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840662, "uuid": "ad460c92-db63-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778742, "uuid": "822aebe9-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.30.52", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737792183, "uuid": "cd5737e0-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844622, "uuid": "e5af0481-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.45.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844862, "uuid": "74d4bf81-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.8.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842942, "uuid": "fc429b49-db68-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737798543, "uuid": "9c169732-db01-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820022, "uuid": "9f062e32-db33-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737825543, "uuid": "7976877d-db40-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83b87ec-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784623, "uuid": "3361a7d9-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813843, "uuid": "3b9649aa-db25-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778442, "uuid": "cf6ecd31-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764343, "uuid": "fb601ae8-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787322, "uuid": "7c49ba41-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840962, "uuid": "601153b5-db64-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.209.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c97be0-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.210.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837003, "uuid": "2845366c-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.219.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737785282, "uuid": "bc331aef-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.147.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839343, "uuid": "9aff9649-db60-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.33.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791403, "uuid": "fca80a71-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.38.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775563, "uuid": "1ae9d999-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.43.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "79a00436-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.35.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801243, "uuid": "e579f7b0-db07-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.17.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "09981f1a-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.244.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737803403, "uuid": "ed42c1e4-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.92.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822002, "uuid": "3b327463-db38-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.242.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794883, "uuid": "16a5f6cf-daf9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83a6e25-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.57.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845342, "uuid": "92eb4bd1-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737781442, "uuid": "cb82cd06-dad9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.27", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823382, "uuid": "71a98d4d-db3b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.62.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737803042, "uuid": "1616e249-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816363, "uuid": "19c43aa5-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.158.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815763, "uuid": "b3fc5139-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.41.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819243, "uuid": "ce29568b-db31-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.121.137", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778503, "uuid": "f352941e-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.122.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7c5d5-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.123.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810062, "uuid": "6e26ab34-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.41.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834543, "uuid": "6da75798-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.149.86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839462, "uuid": "e1eed19e-db60-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.1.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737774062, "uuid": "9c669677-dac8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.6.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a759c0-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.13", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737803042, "uuid": "1616e4d6-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845222, "uuid": "4b1132d9-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.100.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828243, "uuid": "c2b5b9c3-db46-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.107.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737838622, "uuid": "ed61b933-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.111.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816542, "uuid": "8485a074-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.114.32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737803283, "uuid": "a53c28ae-db0c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.122.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763682, "uuid": "71a53478-dab0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.46.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737767282, "uuid": "d337b6bc-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.51.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826503, "uuid": "b59f9643-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.194.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790142, "uuid": "0cfd9923-daee-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.225.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830823, "uuid": "c46c4bc6-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.250.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777962, "uuid": "b0ffafd7-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.209.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "79a038d7-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.215.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794403, "uuid": "f8adcd17-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.55.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845342, "uuid": "92eb4cfe-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.65.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773522, "uuid": "5a9d6a07-dac7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.65.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777903, "uuid": "8e013e4d-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.65.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c956a2-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.70.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777843, "uuid": "6a04f676-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.73.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771003, "uuid": "7d1d146c-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.73.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843843, "uuid": "1513e4c8-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.74.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737838442, "uuid": "81f86496-db5e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.78.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843843, "uuid": "1514063b-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.247.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795422, "uuid": "5835a0f1-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.27.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830883, "uuid": "e8348be7-db4c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.105.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737781802, "uuid": "a201b3e5-dada-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.106.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737818703, "uuid": "8c9cec73-db30-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.149.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0997b688-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.161.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737766142, "uuid": "2c0bc367-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.162.0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773162, "uuid": "83f8a617-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.216.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83b8d8c-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.227.17", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848822, "uuid": "ad2f7f21-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.230.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804003, "uuid": "526839aa-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.4.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836943, "uuid": "045d7127-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.102.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737827342, "uuid": "a9ebf410-db44-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737768722, "uuid": "2dbafe09-dabc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.162.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810903, "uuid": "6321edb1-db1e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.180.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811562, "uuid": "ec7a10a4-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.217.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "79a04b96-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.57.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737766142, "uuid": "2c0bc01b-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.96.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815162, "uuid": "4e2f9388-db28-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.96.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844442, "uuid": "7a42710a-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822123, "uuid": "82e85b71-db38-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737816663, "uuid": "cc689cf7-db2b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.147.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775442, "uuid": "d3383dc2-dacb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.183.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777843, "uuid": "6a04f915-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.29.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0997c7f5-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.85.116", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737776462, "uuid": "3308614b-dace-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.250.10.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737792303, "uuid": "150b1d09-daf3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.156.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789482, "uuid": "83bedfa5-daec-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.64.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794043, "uuid": "21d2a4bb-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.224.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840782, "uuid": "f4eb4d95-db63-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772204, "uuid": "48d9638b-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.237.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771363, "uuid": "53895c62-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.192.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737849183, "uuid": "83d7d50b-db77-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.198.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833163, "uuid": "37205193-db52-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.201.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765243, "uuid": "13af7971-dab4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.224.168", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c238b07f-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.28.3", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787743, "uuid": "76be41d2-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.6.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832923, "uuid": "a834f578-db51-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.74.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844983, "uuid": "bc66a017-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.79.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821942, "uuid": "174301ca-db38-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.24.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771543, "uuid": "bed0a9e5-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.237.155.229", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821103, "uuid": "2324e86e-db36-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.210.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842823, "uuid": "b4ec8c3a-db68-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.10.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737837003, "uuid": "28453a31-db5b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.165.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797222, "uuid": "88eefe1c-dafe-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.173.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814322, "uuid": "597db954-db26-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.224.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770403, "uuid": "175e9875-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.47.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848703, "uuid": "65ea3c40-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.0.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784623, "uuid": "3361ab44-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.164.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737798483, "uuid": "7860a5a5-db01-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.184.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821162, "uuid": "4624a4bb-db36-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.64.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812703, "uuid": "946984a7-db22-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.159.166.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737775563, "uuid": "1ae9cd75-dacc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.13.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787562, "uuid": "0b2b8845-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.189.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844082, "uuid": "a3d88a14-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.194.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847143, "uuid": "c404fe7f-db72-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.130.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832804, "uuid": "6134df00-db51-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.23.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828243, "uuid": "c2b5c580-db46-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.106.100.87", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763323, "uuid": "9b47b903-daaf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.27.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828003, "uuid": "33801bec-db46-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.94.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812822, "uuid": "db6f36bf-db22-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.18.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737807003, "uuid": "4eded30f-db15-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.193.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828722, "uuid": "e04cc75f-db47-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.241.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784203, "uuid": "38bf1a89-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.63.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799502, "uuid": "d826cbf7-db03-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.77.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835322, "uuid": "3e74e384-db57-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.85.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "099786fc-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.86.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820742, "uuid": "4c217d9f-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.78.198.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795782, "uuid": "2eb312d5-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.228.145.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737822062, "uuid": "5ed2e560-db38-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.98.11.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784623, "uuid": "33618f47-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.246.14.88", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845222, "uuid": "4b11a2dc-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.246.23.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819662, "uuid": "c86fd89f-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.62.226.5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737838982, "uuid": "c3c838e4-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.195.7.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737823862, "uuid": "8f890073-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.244.72.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "54082d13-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.168.120.186", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799f599e-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.168.120.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824643, "uuid": "60f89a4e-db3e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.95.215", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788642, "uuid": "8f1af41e-daea-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.118.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737792722, "uuid": "0ebaab12-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.106.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737767042, "uuid": "44533e53-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.239.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840843, "uuid": "18fdc409-db64-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.131.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaec904-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.19.47.31", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815822, "uuid": "d770e210-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.215.238.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c23aab5b-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.225.236", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737785942, "uuid": "4571c724-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.105.107", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737768242, "uuid": "0f916aa3-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.174.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835502, "uuid": "a9bbeccf-db57-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.191.81.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcafc1c1-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.204.218.147", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845522, "uuid": "fe1af14a-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.31.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820383, "uuid": "75ce893e-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.121.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770403, "uuid": "175ea508-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.71.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799502, "uuid": "d826c05b-db03-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.76.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820923, "uuid": "b7914282-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.141.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788342, "uuid": "dbef5f02-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.228.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790802, "uuid": "966f817c-daef-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.133.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841742, "uuid": "30e2cac6-db66-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.33.53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801542, "uuid": "97dff25d-db08-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.61.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769022, "uuid": "e06db767-dabc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.181.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820442, "uuid": "99400029-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.51.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795362, "uuid": "34758e78-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.85.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737800583, "uuid": "5c24c2d8-db06-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.88.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841143, "uuid": "cb989da4-db64-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.121.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789782, "uuid": "3652b88c-daed-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.123.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737779642, "uuid": "9a99ab3a-dad5-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.124.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793082, "uuid": "e570f9c7-daf4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.243.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844743, "uuid": "2d90ccfc-db6d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.66.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813242, "uuid": "d589c3e7-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.120.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799322, "uuid": "6ce31d11-db03-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.179.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784322, "uuid": "802bcb3e-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.244.178.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819422, "uuid": "3955500e-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.102.172.203", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mPassword", "colour": "#FA2EE0", "exportable": true, "hide_tag": false }, { "name": "mUsername", "colour": "#B8A6F6", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848762, "uuid": "8933fe04-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.128.105.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaf0fd8-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.136.195.193", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826382, "uuid": "6dd830c0-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.10.170", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826382, "uuid": "6dda5c73-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.208.159.240", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811443, "uuid": "a53f5f9f-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.225.17.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784862, "uuid": "c2075a6e-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.246.189.136", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799fb525-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.89.80.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810362, "uuid": "210e47ba-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.92.226.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaf2a4c-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.131.160.149", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0997e1cb-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.204.225.182", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799ff87a-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.117.100.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "0997decd-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.15.10.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799fac7d-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.165.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826503, "uuid": "b59e3cd5-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.149.189.221", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737833882, "uuid": "e3ee2cc6-db53-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.200.78.35", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784862, "uuid": "c201c493-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.233.48.166", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737819362, "uuid": "157a22c0-db32-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.102.104.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "PING", "colour": "#be4099", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcae9208-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.187.10.22", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaeb1d7-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.187.7.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793742, "uuid": "6ecfd935-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.36.155.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788882, "uuid": "1dd59829-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.110.196.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "540853d4-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.103.254.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaebb87-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.209.236.49", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840243, "uuid": "b32a9c7e-db62-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.161.118.65", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778803, "uuid": "a64cf412-dad3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.87.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737805862, "uuid": "a6f9414d-db12-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.91.119.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796683, "uuid": "47a0131b-dafd-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.186.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737792183, "uuid": "cd571fed-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.203.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737796442, "uuid": "b834cb78-dafc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.129.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804003, "uuid": "526869df-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.165.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737781083, "uuid": "f5099763-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.24.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826622, "uuid": "fc962812-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.64.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a75e8c-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.152.161.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765063, "uuid": "a8636b1e-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.42.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847322, "uuid": "2eec686f-db73-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.91.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842942, "uuid": "fc428d9e-db68-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.225.56.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777182, "uuid": "e061d448-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.138.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737827403, "uuid": "cdf6f96e-db44-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.12.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787743, "uuid": "76be4a6e-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.183.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789183, "uuid": "d117b0c2-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.151.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737840123, "uuid": "6bdef3b0-db62-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.176.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a753ce-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.239.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777423, "uuid": "6f9d2602-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.67.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737776943, "uuid": "516910c6-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.114.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841742, "uuid": "30e2c6db-db66-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.157.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799443, "uuid": "b48ff53b-db03-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.158.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764103, "uuid": "6ca36dc5-dab1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.46.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737780483, "uuid": "8f7d5272-dad7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737767882, "uuid": "3910925b-daba-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.111.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771062, "uuid": "a084d62d-dac1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.93.217.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790682, "uuid": "4ef8533c-daef-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.51.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817443, "uuid": "9d676dc9-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.65.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737809163, "uuid": "561e463b-db1a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.23.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83bb016-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.201.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843903, "uuid": "38e5a5b6-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.63.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812942, "uuid": "22bb4cb3-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.66.145", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830463, "uuid": "edf3048f-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.187.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778082, "uuid": "f8c56899-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.205.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787503, "uuid": "e7d0fe66-dae7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.110.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799fd9b4-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.115.95", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848703, "uuid": "65ea3df8-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.126.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786182, "uuid": "d495c461-dae4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.127.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c2386d2f-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.217.110.149", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcae5e03-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.25.132.143", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777242, "uuid": "041af16c-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.104.194.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777962, "uuid": "b0ffb24f-dad1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.101.217.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814743, "uuid": "5429af1a-db27-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.61.100.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846122, "uuid": "6384728b-db70-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.83.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789603, "uuid": "cbcb4669-daec-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.29.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c237c860-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.66.167", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737797642, "uuid": "837f5ec5-daff-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.200.224.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765003, "uuid": "84b1579c-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.197.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828782, "uuid": "045adcaf-db48-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.140.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843903, "uuid": "38e5dad0-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.109.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737787682, "uuid": "52b27064-dae8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.24.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831542, "uuid": "7124d11a-db4e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.47.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845222, "uuid": "4b112f10-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.5.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737780723, "uuid": "1e91d049-dad8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.230.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737825183, "uuid": "a2e16a78-db3f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.59.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737782883, "uuid": "26018a7b-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.204.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737782403, "uuid": "082edb8d-dadc-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.101.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777542, "uuid": "b6d40f01-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.141.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815582, "uuid": "4874160d-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.152.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737770703, "uuid": "ca3c158b-dac0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.90.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737768062, "uuid": "a4692614-daba-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.232.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834543, "uuid": "6da74159-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.236.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832623, "uuid": "f58bc867-db50-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.86.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810362, "uuid": "210e5437-db1d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.135.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821642, "uuid": "644774a8-db37-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.144.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843122, "uuid": "67825424-db69-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.151.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764702, "uuid": "d1959087-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.83.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c91790-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.154.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815822, "uuid": "d770de8b-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.42.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769983, "uuid": "1d076a0d-dabf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737801363, "uuid": "2cfa2edb-db08-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.23.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737849003, "uuid": "18da1b23-db77-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.11.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737772503, "uuid": "fb49f37e-dac4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.194.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795962, "uuid": "9a24668b-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.60.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806643, "uuid": "781df2aa-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.161.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817862, "uuid": "976534c3-db2e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.39.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778382, "uuid": "ab9d894d-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.172.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811203, "uuid": "1651ab2c-db1f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.135.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737832083, "uuid": "b3aead0e-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.27.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824222, "uuid": "665e12f8-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.139.104.177", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "540871b0-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.120", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7c5ad-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83b0ede-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.85", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795843, "uuid": "52a7db19-dafb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.250.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784983, "uuid": "09982817-dae2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.251.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "5408357e-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.81.246.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737793983, "uuid": "fe0dfbb9-daf6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.86.34.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c96470-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.234.107.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843903, "uuid": "38e5a9a1-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.234.188.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaf236d-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.235.186.48", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaed902-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.235.244.250", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737845163, "uuid": "27c9656d-db6e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.27.230.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824043, "uuid": "fb4b04b7-db3c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.79.219.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737813302, "uuid": "f98f61c2-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.17.71", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737783422, "uuid": "678c1382-dade-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.148.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794043, "uuid": "21d2a822-daf7-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.154.51", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791942, "uuid": "3e0dd14f-daf2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.211.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737827403, "uuid": "cdf70251-db44-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.72.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843063, "uuid": "442d4d6f-db69-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.82.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737827403, "uuid": "cdf6effe-db44-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.106.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737846663, "uuid": "a601ffb6-db71-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.243.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737765123, "uuid": "cc45df89-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737788342, "uuid": "dbef6bf4-dae9-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737802623, "uuid": "1bece369-db0b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.247.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835803, "uuid": "5ce1be67-db58-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.249.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737785703, "uuid": "b6d99d37-dae3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.254.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737795662, "uuid": "e7588f79-dafa-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.58.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841323, "uuid": "36ea456b-db65-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.21.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737839043, "uuid": "e83b2a23-db5f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.240.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737771363, "uuid": "538958f2-dac2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.4.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794522, "uuid": "3fd21f6f-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.13.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737767162, "uuid": "8bf65034-dab8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.13.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737825603, "uuid": "9d6b9b27-db40-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.197.21", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836763, "uuid": "98e3d347-db5a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.227.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814082, "uuid": "ca889882-db25-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.68.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784442, "uuid": "c76b3bd3-dae0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.7.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791762, "uuid": "d2a1a374-daf1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812942, "uuid": "22bb4975-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.173.220", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c23a423b-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.160.236", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737844622, "uuid": "e5aef68e-db6c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.81.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737768303, "uuid": "33ac4129-dabb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.144.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764403, "uuid": "1f02f100-dab2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.187.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737794583, "uuid": "63c4ec30-daf8-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.147.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810062, "uuid": "6e26d4a8-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.155.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828243, "uuid": "c2b5a6b0-db46-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.120.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791403, "uuid": "fca7fe68-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.234", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789663, "uuid": "ef2b0941-daec-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737766443, "uuid": "dee41838-dab6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737779043, "uuid": "3559e788-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737774722, "uuid": "25dc7542-daca-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836343, "uuid": "9eb07ed5-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817443, "uuid": "9d677edc-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737841742, "uuid": "30e2cc99-db66-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737789242, "uuid": "f4775d3e-daeb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737783004, "uuid": "6e297530-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737764822, "uuid": "19280cd3-dab3-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737830103, "uuid": "17a77f2e-db4b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.100.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737763742, "uuid": "95505b88-dab0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.129.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737773282, "uuid": "cbb57e8b-dac6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.220.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821763, "uuid": "ac3f0d5f-db37-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.4.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737782822, "uuid": "0208f8d0-dadd-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.16.177.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737847143, "uuid": "c4050063-db72-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.240.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834603, "uuid": "918229c1-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.173.124", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834662, "uuid": "b4f085dd-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.238.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791163, "uuid": "6d4a3a05-daf0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.100.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777423, "uuid": "6f9d2b20-dad0-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.213.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821642, "uuid": "64476a56-db37-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.59.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737782282, "uuid": "c018e453-dadb-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.9.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737779223, "uuid": "a067cca7-dad4-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.18.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820502, "uuid": "bd230a31-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.195.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814203, "uuid": "125d6fdf-db26-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.22.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810302, "uuid": "fd6e5b50-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.232.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737791582, "uuid": "673d91f6-daf1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.237.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c23a9726-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.238.225", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737786962, "uuid": "a590ac57-dae6-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.27.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737790742, "uuid": "72c9a810-daef-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.131.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737769803, "uuid": "b1cb88b3-dabe-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.139.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "5408813d-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.150.84", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737806582, "uuid": "54088b95-db14-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.108.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737811682, "uuid": "33f3ccad-db20-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.135.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737817383, "uuid": "799f83d3-db2d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.80.67", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737777063, "uuid": "994f0ba5-dacf-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.37.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737778442, "uuid": "cf6ecebb-dad2-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.238.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843903, "uuid": "38e5b78c-db6b-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.98.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737828722, "uuid": "e04cd505-db47-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.201.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaf34db-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.79.103.5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826503, "uuid": "b59f71aa-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "67.217.228.211", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826503, "uuid": "b59e825e-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.5.42.207", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c2383bc5-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.181.232.67", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcafa0a8-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.84.30.164", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaf1c48-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.64.65.248", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737821042, "uuid": "fed2b6a1-db35-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.233.148.213", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784862, "uuid": "c20404c7-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.120.126.48", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737834782, "uuid": "fcaea9bd-db55-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.96.142.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737810062, "uuid": "6e26a3e3-db1c-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.225.231.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804003, "uuid": "52686790-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.251.64.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737848762, "uuid": "89337085-db76-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.32.41.31", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c237b693-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.146.23", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c238766d-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.148.213", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737836402, "uuid": "c239723c-db59-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.155.84", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737831843, "uuid": "2459cc96-db4f-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.115.233.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737804003, "uuid": "52684eb5-db0e-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.115.235.15", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737829142, "uuid": "dae44260-db48-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.115.235.92", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737820442, "uuid": "993f0422-db34-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.103.125.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737843662, "uuid": "a97d5dcc-db6a-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.159.113.43", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Matanbuchus", "colour": "#4a3428", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Matanbuchus", "colour": "#4205e6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784682, "uuid": "56a6fa76-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "99.215.7.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1737812942, "uuid": "22bb40c7-db23-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "99.228.16.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737815463, "uuid": "012e55dd-db29-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "anzorpasechnik.netlify.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737824463, "uuid": "f5cc8dc6-db3d-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "bot.floppaonyou.fr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826322, "uuid": "4a1fe0e4-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "botnet.fantazy.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737814982, "uuid": "e2dd3e4c-db27-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "destinystealer.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737842465, "uuid": "dfee28ab-db67-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "emorista.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784803, "uuid": "9e9c5316-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "freevpsmethods.github.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784863, "uuid": "c25d4658-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "maerchen-beat-frei.ch" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737835383, "uuid": "627ceaed-db57-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "nicostudio.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737799982, "uuid": "f627e558-db04-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "nvntrk.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826083, "uuid": "bb23c451-db41-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "panel.daudau.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737784863, "uuid": "c2178470-dae1-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "ripplemascot.money" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1737826503, "uuid": "b5adaccb-db42-11ef-a9ce-82aee05be84a", "comment": "Malware payload delivery host", "value": "solve.xgnv.org" } ] } }