{ "Event": { "published": true, "date": "2026-04-03", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-03", "timestamp": 1775261724, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "162ff418-772a-4e50-8967-348d26ce4bfc", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775175135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175135, "uuid": "86483b7d-960f-4659-8d99-3f3408e6d95e", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175135, "uuid": "a0577140-0177-4a1c-817c-e475c830bf19", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175135, "uuid": "3a035919-1289-42e8-b822-1da33305e152", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175135, "uuid": "2484fae8-77d8-47f3-82bb-ac72873f3b90", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775175135, "uuid": "b5fe7d63-71cd-451d-812b-c486f79de28a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "035c94e2-2ef3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775175669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175669, "uuid": "c9e76b52-099b-4eeb-8540-34ba67174332", "comment": "Malware payload (Mirai)", "value": "c1ab9286df653d335565d8fcd4b60d64", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175669, "uuid": "6f1b25cc-a844-4900-90c6-2eeb8ebd5ac9", "comment": "Malware payload (Mirai)", "value": "2db76251333918e6bc5d8960aad6e2a2f7b8a01abaea32350c58530d3a818a8e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175669, "uuid": "34b9eceb-30f4-4cca-a528-1af6cc2e547d", "value": "T13E242A45EA418B13C0D627B9FB9F43453333AB64D7EB63069528AFB43B8679A4F631", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175669, "uuid": "598cbe08-9bac-4f68-915b-4719ccd1c7c0", "value": "6144:XUdbYN5dO0fSM5aE0yEqt4KzJAHd/yAz/TzM/Rsnq4n+vH5V:XrfSM5aE0vqt4KFQ1yYTo/ZFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775175669, "uuid": "4e8549fe-0537-4667-8861-218dc1f88c10", "value": 213000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175669, "uuid": "28d56d54-c11e-4509-ad8a-6731b3e74e1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775178726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178726, "uuid": "ae9395a7-c1a6-473e-a726-de7011cacca9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178726, "uuid": "e470b46c-5def-4909-b9a5-b597f8d9931a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178726, "uuid": "c5fdf60b-95a9-469b-8315-33379a191d67", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178726, "uuid": "403d3213-8bbc-4065-8705-43fb92241480", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775178726, "uuid": "5ef76989-59f9-4621-988e-50e512026141", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775179694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179694, "uuid": "4fe8929c-74d6-4c2f-8d1c-ab43f818ec51", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179694, "uuid": "36f858db-6470-4416-925c-3c1526098fb6", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775179694, "uuid": "f128a710-f881-471f-b13a-e928e59ed558", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775179694, "uuid": "66aba026-18a0-4ed0-8b56-c1aac9fc96b7", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775179694, "uuid": "f0a39869-480c-452b-b68f-00e3e4773434", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fca7683-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775183026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775183026, "uuid": "bde31d49-88a5-490b-bbce-ee9719e789cb", "comment": "Malware payload (CoinMiner)", "value": "1c16a630f64fcde9c94e5fa219374330", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775183026, "uuid": "94dcd16c-f324-4482-af45-16943185371a", "comment": "Malware payload (CoinMiner)", "value": "efdf8e6d182ba4644375fa7eaad615b0df41f4e872e1550466e76c8b2d816ddb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775183026, "uuid": "a748e8bd-388c-49a4-859e-c0083984dfc9", "value": "T11D563362F440E432E038203925F684A6B17DFD7347654A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775183026, "uuid": "558d3527-7d2e-47cd-8d9d-439f08d7425b", "value": "98304:EUmC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3muRH6OJAMp+ysk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775183026, "uuid": "eada4caf-46dc-4e1f-b263-de1453875c15", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775183026, "uuid": "c491d613-14e9-4782-b24e-02ef44f63bdc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3005d0dd-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775184427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775184427, "uuid": "af3aaadb-27bb-4c23-838f-3d5a1e25f56e", "comment": "Malware payload", "value": "1afd8744ac857cf30354e220b7d94d4e", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775184427, "uuid": "bde5f0bd-5f1a-4c39-b5be-e05b7ea835db", "comment": "Malware payload", "value": "9eb4cab39b3623eb54773a819cacc98e434ae2649420bea6191699f44eae8a6a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775184427, "uuid": "e0c65673-f7df-4a2f-895e-6ebaefdf1f2c", "value": "38641287EF36BC1FCB002AB225DB4B9D986D775B42C7E0A5B9C0814F17E21857AD2294", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775184427, "uuid": "71d335c0-4ec6-4de7-9cf3-f21384e6594b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775184427, "uuid": "1e1c7218-23cf-4711-8dd3-47e45ac4bf2a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e31f7b60-2f0e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775187641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775187641, "uuid": "6a3810b6-9442-418c-9276-f397401629bb", "comment": "Malware payload", "value": "cfaca08523f3513e6568adfc53938c3a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775187641, "uuid": "9f08f672-d440-410b-a159-883240bc29ea", "comment": "Malware payload", "value": "16948bc011d3dde739acdb97a759f744a07be3b6d0b5c0a7412e3ea6b0d62a2b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775187641, "uuid": "3b07f5b6-36ad-40ef-8f86-79d3d0868b30", "value": "T1188309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775187641, "uuid": "3b367563-3ed9-496c-8d1b-8410b10789d5", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnYWafVN/:XEKltp9txAX/yr2pbYWeVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775187641, "uuid": "29f48168-fb2d-497e-8f04-e93fb474a1b8", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775187641, "uuid": "df2167cc-b964-4c66-abd9-e53c3cd3a071", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d763aa93-2f11-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775188909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775188909, "uuid": "9aef80c4-b5a2-4bfb-914b-b2dcbd196a52", "comment": "Malware payload", "value": "c6ce239bcfe3a2bb0f82bbe5e6d3f62f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775188909, "uuid": "7629e418-9064-4308-94ad-5b15fddc631d", "comment": "Malware payload", "value": "3e064df8be8cee66031cb675d444d38e633e1eb0a14b162552ec2c7a05e27b41", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775188909, "uuid": "e2ed7655-4b8d-44ea-9a7a-d0f4c820416e", "value": "T1DB93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775188909, "uuid": "2a62d8f9-db4d-4745-95d9-97d72296ef89", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXRIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775188909, "uuid": "081bd80e-c548-47c1-a56a-84c05c5bf769", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775188909, "uuid": "138c2016-4a0b-473d-b961-ea71a1420e08", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53d142a7-2f14-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775189977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775189977, "uuid": "8be388ac-c379-4313-8f0a-cb7e049f44ce", "comment": "Malware payload", "value": "8e49e8741b1bb05107a40af83ab2c019", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775189977, "uuid": "93b8e786-8408-4460-b7dd-0978528f5810", "comment": "Malware payload", "value": "a136bb36e9cf9f00f40f76c04cc9b445c4e0e0b8f275a987fb4184570eea5b9b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775189977, "uuid": "7e0ceb99-b485-4151-a22b-10fc0bf209ee", "value": "T15204D0C87DA984B48B3F6425092F5E478A8ED523061DC4C0BEEE9F54BF125A3B5BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775189977, "uuid": "89917a1c-db55-4f87-a031-eb8cef07ce63", "value": "768:hangNPWsGhIx8onEOYCbq4pSbCm/uWUextHM9+QybkfauZkCybAQSH6z6m6S6761:PPsoEO/bqkSbCm/5bsE39BUcAC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775189977, "uuid": "95bbd674-f98c-4659-8a16-f9bed3f4d5c9", "value": 178401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775189977, "uuid": "f55d10e5-77d6-4363-b718-c2499ca5b834", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "141f7a59-2f15-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775190300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190300, "uuid": "d9d15e3c-8975-438f-8c80-d147ee150012", "comment": "Malware payload", "value": "3ec9d8d99ab860380b6015e63c116dd7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190300, "uuid": "fec4c994-b5e0-4516-8db3-f24948f049ea", "comment": "Malware payload", "value": "a7b0d6f4f1362182fdcb23926486fa03fdd010245d0c5345f3ee2f4eec505f92", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190300, "uuid": "cc7b675c-0f5c-436b-9f13-88144da3dae5", "value": "T1CC931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190300, "uuid": "b9e975aa-f927-448a-8a51-da88deb76644", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKS1sPyKyt8:08jI00GitkbFv2v05xspro1sPy1t3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775190300, "uuid": "b439bc97-ec24-44e3-a8cf-c3de5d7e0200", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190300, "uuid": "bd105f4b-44ea-446c-b201-4a8fc3e9dff1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775190918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190918, "uuid": "a7c88a6c-a18c-4804-9633-68d07fceda16", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190918, "uuid": "33bc20b1-40bf-4cba-a0a5-a0b4187a62ed", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190918, "uuid": "57ef426a-e8c6-492f-b3dc-7a608637e144", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190918, "uuid": "0edf584d-3dcc-40be-8a3b-29ce1860d05f", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775190918, "uuid": "be63d8c4-507c-4cae-ac11-50fc9b945d4a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ab5521-2f17-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775191264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775191264, "uuid": "c7ef0706-4e04-4a47-ba62-6cf6453b10eb", "comment": "Malware payload (Mirai)", "value": "c9e1a2864de67643ef6477c94c3cdf3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775191264, "uuid": "3fcb2ab8-3e55-47b9-b5c9-5450c6eeeba6", "comment": "Malware payload (Mirai)", "value": "df16101db6081c19469f5d5de0d51c6d9bd4143be1ca7c4884cdd5196fb1214c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775191264, "uuid": "94592a32-82fd-4564-b385-45868f1ce39d", "value": "T14B74392AFC41AB51D5D12ABAFF2E928933130778F3DE71229D155F30B78A80A0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775191264, "uuid": "fbb4295f-a4b1-4469-8f3f-6d3e5a99a7c6", "value": "6144:8+GU8GhPQheq/3dPTkfrAxRY30WnSKMbqXkiXb/+x5lgzJU+6fuecSs+pa4PsFYg:8hgKKLLqqB/OxkePs+pa4CYObMJfged4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775191264, "uuid": "3767bf42-7f7b-45e2-b488-09ab703b4038", "value": 339600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775191264, "uuid": "58cca7a7-6c56-408d-91a8-ffd9e16a495c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b4940d4-2f19-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775192003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775192003, "uuid": "c9d72f57-2fd2-4658-a8d3-a15fb869c4f0", "comment": "Malware payload (ConnectWise)", "value": "f44d6421a22bf3a334c9d5a674adc86e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775192003, "uuid": "aaaf8aa1-7aa9-45d1-b082-fb60e33a039a", "comment": "Malware payload (ConnectWise)", "value": "53fbfecd8c9fb66f9e94dac2b77d5da62a36ac291b8e1dda928d78520c6bc732", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775192003, "uuid": "732d20ff-4cbc-4e5d-9ee2-38904605452d", "value": "T1C9C6236523FD401AF8F74A79ED3682E56972BE64CF21C11E9328B90D2E70D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775192003, "uuid": "9861c760-6ce3-4503-95c8-05a4e305d867", "value": "196608:oWh0cGwjWh0cGyWh0cGeWh0cGTWh0cGSWh0cG:oWacxWaczWaclWacGWacdWac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775192003, "uuid": "0be910d1-1796-4ced-b486-64e73e4a242e", "value": 11771904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775192003, "uuid": "c36bae02-938e-445b-9a18-4243bce95c92", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812b3727-2f22-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775196066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196066, "uuid": "75cb8253-9004-4a9c-b809-23b65c219999", "comment": "Malware payload (Mirai)", "value": "e657f7cdc77dd656cf8bdbd548139518", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196066, "uuid": "bb99150b-6f74-4920-8296-ad33069fbef8", "comment": "Malware payload (Mirai)", "value": "a231b7617c57c8d17d3552579e4cd14b82aa112c632ec830643a9bde2034a1f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775196066, "uuid": "91d07a0c-6797-4b91-88f6-c4343b6a0077", "value": "T191536BC4A543E8F4EC1611757077BB378B76F47A1029EA86D7A8F532AC52B11E2473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775196066, "uuid": "16ef33fa-d352-4c8e-9d60-19c50f1d4dbc", "value": "1536:oGQFLedMzp7zk8+R985J28xmiefdXosVwRy8wlATZSugY:VQ1qMzpkhD8y8xmi24s6R7QAo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775196066, "uuid": "38dceb76-c4e9-4930-a013-8f9d2404a2a5", "value": 65232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775196066, "uuid": "bd5aee70-de55-4533-9f98-0ac82075f839", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0682d16f-2f40-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775208745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775208745, "uuid": "fb6f1e2a-03ec-465a-a341-5ec1bfd773f9", "comment": "Malware payload", "value": "408baa94cd3e766fc9d2326311c91e99", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775208745, "uuid": "f5c89c62-de61-4bbe-ab55-36ab8f191aee", "comment": "Malware payload", "value": "282eaff6ff1f1f1677ab4d9c1c140bc0f437f09f75a729bdf3b45dcdef441e1b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775208745, "uuid": "f0cda65c-d38f-4bac-aa91-436d4be5fa50", "value": "T11296338542E105E3F8A7E13D5AA65195C2B3B4101B22C9DF1BA483AE3F5B3F24D36F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775208745, "uuid": "dc8c3918-891d-440a-8bb0-c39ea7b52d5f", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775208745, "uuid": "f540c74a-947f-4acd-ab39-90c89cc52b2e", "value": "196608:QrlbatbW897G+x7eovq5XMP6PzFcx97WZHsoqEbRjMFb:Wba1Fdq1B7wgZHsoqEbpib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775208745, "uuid": "c1ef6402-3a8b-49f4-b7d3-8376516f36ca", "value": 9386333, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775208745, "uuid": "afb8b6e4-738d-4700-bdcf-d025ce0a0b10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db8a9c29-2f42-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775209962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209962, "uuid": "da3e8cf7-7dd9-483b-a7ba-f420bbba26f7", "comment": "Malware payload", "value": "5595dc6199bada093e235f097da747bf", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209962, "uuid": "b9f1215f-030f-4d61-8cb7-01b3db425149", "comment": "Malware payload", "value": "c835d1d2e03b9845de604abaec613c59e6966147bdfc3dc18459ebcca44c9a27", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209962, "uuid": "f0d0519f-587e-496a-a5d7-b3e9531e789a", "value": "T101863324B880C057C0EF45755096C27CFE5219B06F42D4AFE78B466AA6B37C28B36E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209962, "uuid": "6dbc4014-aac9-46f0-98d4-9e19e7495559", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209962, "uuid": "02f0838b-b8eb-42c7-9ee9-c139739f967b", "value": "196608:CItOlN3quiBPL7LGFZhKejd/024RFFui08lp:zwl9quiBD76tBj52RFFF08f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775209962, "uuid": "30bd4332-1ae6-477a-babe-44776c94b7d9", "value": 8610816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209962, "uuid": "ed79899e-d525-43d2-ba2e-331cfa0b0939", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f81f8b-2f44-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775210625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210625, "uuid": "04e89efe-c3ba-4cda-bdcc-cc4389d3c092", "comment": "Malware payload (Phorpiex)", "value": "53f8b48aac10f29dbc8017c5b559319a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210625, "uuid": "3f7287ab-c1dc-49b7-b7a6-7c7ea1fa3bbe", "comment": "Malware payload (Phorpiex)", "value": "0be4b693eea4b551de0044d8303c31749df873e005756db5a1d68db8c9a516fd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210625, "uuid": "3c7c6a68-2c2b-449c-950d-530d63a0ba09", "value": "T1B9823A0FB9424216D0D100B4A672867BC9B9A87637C864EBF7D48AED0A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210625, "uuid": "3828f5a1-52dc-49e8-8420-1fee99c80bd2", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210625, "uuid": "e98215f9-3157-424c-bf97-aec9d0b5481d", "value": "384:UI78VGwSRFqw/lsx0xu9NHmgdav8U9cQ:VXhsx0U9va0Un", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775210625, "uuid": "bc3ad0d1-0f42-44c2-a75d-a666e6e0a683", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210625, "uuid": "96c590ff-c5cd-4ef9-9998-49c3a36a43de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775211704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211704, "uuid": "905ad192-a8e6-47ec-bea3-c148453e0e41", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211704, "uuid": "4b927838-6925-4564-ab4d-6c4120e6cff4", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775211704, "uuid": "43b0feb0-1cb5-492d-8431-9d329f13db1b", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775211704, "uuid": "9e04bfaa-c765-473f-b98b-671b76deb369", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775211704, "uuid": "49b4225e-e294-4e2c-b570-8b11ef28a5be", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775212038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212038, "uuid": "d42f29da-1a89-40b5-b3b0-63b2e41445fc", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212038, "uuid": "6ff15f58-3853-4947-9e2f-96f366198790", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212038, "uuid": "bb98cac2-e661-4efd-831f-7df1dc8f8836", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212038, "uuid": "75e30b71-92f6-4737-b90f-92b8eb8ee538", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775212038, "uuid": "090bbc54-a2db-4044-b509-da7563f8f387", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "048fae04-2f48-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775212178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212178, "uuid": "6991ba4c-b6db-4bb3-964f-587e7c715ec3", "comment": "Malware payload (Phorpiex)", "value": "0b7ea97cc3719b9e10d65dbc5dba9d75", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212178, "uuid": "beb226ac-24d1-4413-9d4a-59749bcc2cb1", "comment": "Malware payload (Phorpiex)", "value": "11fbaa9f11fb195b7a2da2030dfd8e29770f46646fd783c4b969a79374be2cb2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212178, "uuid": "dedf4769-ed6e-43da-801b-7119d86f573f", "value": "T12A824A0FB842421AD0D10074A672877BDABD9876378824EBF7D48AED1A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212178, "uuid": "a042a0c8-16d1-47c7-8984-5425088e068d", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212178, "uuid": "b8c9268d-0042-41de-a554-6c99e9079c92", "value": "384:gI7MVGgiBFqwTFshSZRu9NHmgNav8U9cD:xHNshU09fa0U4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775212178, "uuid": "56511b89-9ae0-4a9f-b245-c292a2492e2d", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212178, "uuid": "679b6653-9ad3-4c4f-a7ee-36d910d61c5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccff2413-2f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775212944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212944, "uuid": "26ed2a59-68a1-44f6-acff-462dab80b6ee", "comment": "Malware payload (Mirai)", "value": "8b640456d25b0b5a9936020592fa6fe1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212944, "uuid": "8d4e5852-39fa-41cb-9854-9468c4407490", "comment": "Malware payload (Mirai)", "value": "ae9922b4b6ad2cfae21a02d29cccbff0353f83073b408b09efa1a21b34940389", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212944, "uuid": "0b7bb966-b2a0-44bc-a954-1f0949dc655c", "value": "T1F9242B46AA418F13C0D627B9FB9F424533339B64D7EB73069528ABB43B8779A4F235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212944, "uuid": "d29a52f0-9421-447d-befc-a237e5d99ad2", "value": "6144:DcQ0pNZsdrwallv4JRijAWyKyav2TSM/RPQrEV:DLdrwallv4JRWBdyfT7/+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775212944, "uuid": "b32e9f29-05a6-4d8e-b8e1-a7e9254ff5c9", "value": 219984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212944, "uuid": "dd8318e5-624d-4f84-ba11-832f8a7fb67d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c6c0aa-2f54-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775217492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217492, "uuid": "3b640697-807b-44b8-888f-aa09c92c0b31", "comment": "Malware payload", "value": "c6469c9ff76bfd88e09aca1a44fdb1e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217492, "uuid": "16f2080b-fc8c-44b9-9774-2309f6b89b2c", "comment": "Malware payload", "value": "604697c8a05c31f1135e03c625fead61c11e3a1d4c03a7c721b292a196b26a89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775217492, "uuid": "62db7beb-b21b-4d3f-812b-dfd92bf78a27", "value": "T1A1341283F050585EC5EBF1FD667F8233FA30B846923A679F1B02E9701F065656607B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775217492, "uuid": "9c9ef0bf-2785-4c1a-ab52-2bfd99db3b21", "value": "6144:lnRawWnTQGTVwzg3BTVWPAjwRtRI1GttMyA5kXfrsAJ:qnTXTVKg3BTXwjm1GttMycUfr1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775217492, "uuid": "15abe239-bc6e-4019-ad5b-19c841e35fe1", "value": 237214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775217492, "uuid": "75d2c0f7-a299-4cc7-979d-d7e0877f0e01", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d04a400-2f57-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775218688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775218688, "uuid": "bf8202ff-37ff-41b8-9c57-ac758701bb5e", "comment": "Malware payload", "value": "d948d9e5df2b1153b67b6b4c92dcc395", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775218688, "uuid": "6a7d4d21-d013-433e-9aaf-d0756361205a", "comment": "Malware payload", "value": "a9146d18ed39789b0f3f538ad7e2033bc4029fc56257d9580ba7f71b73eb952b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775218688, "uuid": "08da2e66-cacd-4689-a5c1-8338f2ae1567", "value": "T16D8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775218688, "uuid": "67ac56c4-54d8-41a9-8f51-c3a05c5d4402", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnjWaYVN/:XEKltp9txAX/yr2pbjWxVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775218688, "uuid": "d8b3d9a6-3922-47a8-896b-fb3c285de1a1", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775218688, "uuid": "203f8f0a-9fbe-4bc5-94c5-adaf0a9fb8c3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a362427d-2e7a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775221004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775221004, "uuid": "5ea1f864-c304-4e5f-851f-8050ad15a2c1", "comment": "Malware payload", "value": "d251b83f8b12b05f1fdf35691706e31f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775221004, "uuid": "65a18270-4ee3-4738-93ba-676cbbdf49fa", "comment": "Malware payload", "value": "434b41c486ecab506f5ce42cfef0dbbd484c7e7c7c45ac6ecf97b5244798861e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775221004, "uuid": "bbfe78a2-31ca-4f52-a130-162570218339", "value": "T103C022468210814ECFAC26A6D1486B31000B002B1AC03CCA2AC8DA202045A4B624C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775221004, "uuid": "c32ba2d4-0063-483f-92f2-c1776921c89d", "value": "3:YWADjhdHNAEJRNHqHFCyLyjTwIWEWHWyf3u4fIX/bQLsCoHs1zR2bXdx+:YWAjygRNKYFjkIiHsZPbBoR2zdx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775221004, "uuid": "af087ffe-6660-4d7b-b2ae-c5afe97d1313", "value": 189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775221004, "uuid": "f8469ac3-3174-468e-b6c6-ccb8f7632965", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9704a4e5-2f64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775224450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224450, "uuid": "291b4e7d-95e7-474b-9c52-49a9e0c1f011", "comment": "Malware payload (Mirai)", "value": "8df19b09f6f70a1bf59136bba61eba83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224450, "uuid": "ae5d9ab8-3071-4413-90a2-9a986502b942", "comment": "Malware payload (Mirai)", "value": "af40853f4f25f55ac2239bb15e945d5c97b6ad9d218c34307b1ad4c659efb0a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224450, "uuid": "d3f2e877-6339-4b52-91cd-71471c8c58e9", "value": "T11944E81A3E228F7EF26D873047F78A31975976D61BE2D644E26CE6101F1038D641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224450, "uuid": "ea7465b2-3c64-4018-b26a-45d0be50f1c1", "value": "6144:xSNi6SsiZOJs7hR8BDj3x8dQo4jZ4nWmfrvZDmBAVp9QZr:x0+lhO2d74t4nWmfrvZDmBAVp9QZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775224450, "uuid": "6e1b61ea-60a1-430c-ba50-67eb81255fcf", "value": 270421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224450, "uuid": "b871e7ca-dd42-44dc-9b15-529db4e5150e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c2d0290-2f64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775224458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224458, "uuid": "3de03290-2b6f-4541-986d-7bc1d39cbf64", "comment": "Malware payload (Mirai)", "value": "40d7f5480d1462f331cfe9a3c50cc41f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224458, "uuid": "063958f4-1276-413e-bf37-779772353f6c", "comment": "Malware payload (Mirai)", "value": "826536353e28abcbbb992cfd874830dee6f9ffe94ccbb1c65ea4d57800710458", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224458, "uuid": "a6aee77b-55eb-4af1-b795-c4470ccdbbe8", "value": "T1D8440A0ABB510FF7D8ABCF3702EA0711248DE81727662B367638E978B64A54F15D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224458, "uuid": "025db43a-17c0-451e-a171-689d895ddfb5", "value": "6144:3lvLz7b70YnnOKiDGi/W/wMqtZgOnxGh4nWmfrvZDmBAVp9QZr:tn/gWLCZgOxGh4nWmfrvZDmBAVp9QZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775224458, "uuid": "080f92c9-edf4-48ca-aee0-7b722b70b7a7", "value": 274546, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775224458, "uuid": "bf7f9a88-d56f-496c-a390-4234b32ae395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d69474f0-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225415, "uuid": "e3d2fbdd-a560-4718-b33c-a9f3bc6f6014", "comment": "Malware payload (Mirai)", "value": "e8960c79797069d6e06beee223fe887a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225415, "uuid": "ec0d94ae-3059-4786-985b-adcbbf0258ff", "comment": "Malware payload (Mirai)", "value": "608ae3e738ea063633ebcc68822aad47b57eee8f5b83b6a7300e41c93511288f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225415, "uuid": "63cb99b6-a1a0-4902-ba0a-6849e7289e55", "value": "T1DA936AC0F683D4F5EC8705716076E7375B32E0B9202EFA43C3699A72EC91551EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225415, "uuid": "7a487c16-50b4-4fdc-b6f0-fd3ae9866e82", "value": "1536:z1QVZayYlK7a0c8mkxgMQez3Pk2mQMwn645hlDOrS8/LHE:zCVZarK79cJkGMQez3Pfewnf5zamQE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225415, "uuid": "7858774c-8b0d-4993-b25e-c83760e7e4d0", "value": 89896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225415, "uuid": "edb7461c-79b6-4487-9a7b-6696a59734e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6e9163e-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225416, "uuid": "93b02509-7af7-4dd1-a389-bf81506fb185", "comment": "Malware payload (Mirai)", "value": "6fa7063816e2557b47b381fac2c7a81d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225416, "uuid": "d5b8fa27-d004-4a1c-89f2-5c8591e11995", "comment": "Malware payload (Mirai)", "value": "eac165a583f11b00a25417752c26d7b5b82a49fb881509b9502b80a3528352cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225416, "uuid": "d9faf6ca-54ca-45c3-85cb-8d5216e86cf2", "value": "T132C31A45F8405B23C6D611BBFB5E428D3B2A17E8D3EF720399255F60378685B0E3BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225416, "uuid": "777281c9-523e-4b6a-92d5-24c729833f07", "value": "1536:pjK/iqXG5Rf9xw6mc/uQO3OWuA4RQ4VlJ8T7qnkHBfO5Y80vizH2Vklwtwyw5Rpk:1K/i/7rmupOeWuS4V8qnkHNO1OMW3AD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225416, "uuid": "8840aa25-0216-49cf-a8d6-4d67d542625e", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225416, "uuid": "b054db5f-6ef0-4b69-9339-fa693230568b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d813516b-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "20734a04-b3ae-47ac-bb5f-d0d0c07481a4", "comment": "Malware payload (Mirai)", "value": "ffc8c33c70a1d6e4d3589265395514a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "ebde8432-b91b-4708-82b2-531c49710cc8", "comment": "Malware payload (Mirai)", "value": "a8a600d0fc39e006205b4e850fd54f342d2e0d22bd9ff2152cbbcc65849dde53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "01330e6a-8c01-4942-83d7-262132560760", "value": "T174D33A06730C0A47D2632EB03A3F67E193AF9AC121E4F640355F9B8A95B1D335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "bb72cac2-b1bb-482f-9a2f-8b696a063607", "value": "1536:GEUuUwJzrscg3IBU8NxfytBteYEXejatwFF7l7AJvAhh5rp+2eIq3zi7Wf:z1U8NxityhwD7l/hnaf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225418, "uuid": "9aabfd9d-e4f1-447f-92c6-4c9745b5b644", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "d7249dda-604f-4559-bc2b-56b44e01ada1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d83b846d-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "849bcf4f-b3da-48a8-83a5-df81f28c0b66", "comment": "Malware payload (Mirai)", "value": "af4dd17c89ab04633e04ba531cccfb38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "808823bf-d5ef-4e00-996c-825f10a8b798", "comment": "Malware payload (Mirai)", "value": "83e7e3e8a8d8514ea24c9083df68acb5b7e6be3ca259c95d33bb31f9d5aaec2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "945b24f7-1727-471d-b862-90ba3339e517", "value": "T1FBE32AD7F800DEBEF80AE33748530905B630B7E115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "d9c2651e-5e1f-4216-8b20-f8dbce42b32e", "value": "3072:/agHpXTZH+XIajAHknidpWcZEEVvjbiQLKXrjyqKUXV:/JMbjAHkid/ZEMLK/yqZXV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225418, "uuid": "7ebb218c-b31d-4210-a741-65da27337ebc", "value": 150400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225418, "uuid": "fe7ecad8-7424-498f-b5f8-ddc0e355af7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9dc147d-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225421, "uuid": "d9afe4dc-42d7-4432-a6dd-e625e21b3dd8", "comment": "Malware payload (Mirai)", "value": "e04bfd0265218b5b7d714d0b69c1ce40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225421, "uuid": "19e81fe4-f399-4a3d-a114-f639925fcd77", "comment": "Malware payload (Mirai)", "value": "d3c7c81f534b213150c0acfabb6476cfb4ebeeae891a16cb76cc26a864f0bd0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "fdc0b68c-26ed-4fb3-b76f-8856683436b6", "value": "T1D4E30B46F8814B12D5D111BAFE1E124E37231BB8E2DF72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "bcac8727-494b-4237-bf5b-90296a0dfd8d", "value": "3072:Pn0VejuWohUqYKfDXEzML7RaQY9WQ8b30/jqLYq:8ejuWuhjDX2MLda5fC0/jqLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225421, "uuid": "fb28d424-219a-4c20-ac1c-ea5093774289", "value": 144028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "1332f4e1-da93-4ec7-934d-97c4ebedec26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da346ded-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775225421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225421, "uuid": "5d7ae3b9-ba76-4de8-a93d-eec8647a8511", "comment": "Malware payload (Mirai)", "value": "154245e2a15fa97f29a41ef0ede83bc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225421, "uuid": "f01c562a-a621-4218-a839-0bae95be2002", "comment": "Malware payload (Mirai)", "value": "4c651b8bfa5c28f1c0236e53ff9037a2738a40902e765464abbbd96cae6a131e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "39c552b0-7dc9-4543-9b33-b7d5b6a69018", "value": "T1D2D35B17B4C180FDC4DAC1744B9BF53AED72B5A91238B26B27D4AF221E89E305F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "2e332c6c-e80b-4b87-b530-f05954342a19", "value": "3072:l9yPSZCG2lTFpQ6TE7SBpZDaQ8dEoBjgQy03DcA8mrFn7:l9yPSZCG2lTFpQ6TE7Q8D4Gn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775225421, "uuid": "90c902dd-ce4a-4be8-9ab4-17bfd9857344", "value": 139736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225421, "uuid": "7783a2c2-4420-4061-a727-11135c7c0789", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1b89baa-2f68-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775226320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226320, "uuid": "6c6eaf1a-8c7c-44ce-8927-b69f1d9288c9", "comment": "Malware payload", "value": "b72d877801fed29d650c92cfb7740dbf", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226320, "uuid": "0a6126e6-55f7-4a5e-a24f-f53abe59c0c8", "comment": "Malware payload", "value": "bc5572a799d2253acf7bc2a20456f233fd84bd853d4812bed935806fed60494d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775226320, "uuid": "1d8b67d6-f99e-40b9-ba29-945baa9636bf", "value": "T16E312DCBF860AAC1C814AE5771714416A49BF6CD27F60F989F9C39B688CDE05F412F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775226320, "uuid": "67b54b5d-f0b0-42d3-a54c-d47e3d39a107", "value": "24:GIYcxQZexAZezIAZeLAZemAZeVfZe9NAZePz5e4ZeFtd1Ze+0/bZeuTkZeSZeXME:gcx31I94KNElEF1GG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775226320, "uuid": "8c1caac7-2bf7-47d3-b68d-0e90c98d7174", "value": 1453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775226320, "uuid": "e9ff6200-11fd-41e4-862f-3d1ad9c1b462", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88402ca6-2f71-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1775230008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775230008, "uuid": "7de8eabc-f674-4d4b-9143-17f4e580f82d", "comment": "Malware payload (Adware.Generic)", "value": "8de97b1c91162b90d65b5b89292aaa8e", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775230008, "uuid": "ff581c9f-aae3-46b7-b510-ad9a0f8cf7cc", "comment": "Malware payload (Adware.Generic)", "value": "83083f5ea78039701f58c66ddce0d1a68ae3872dd4779d51a9a7736da25a9273", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775230008, "uuid": "81e71af5-a0b3-4a3f-a2b7-f2a920c54545", "value": "T15AA6233FB268A53EC96E0B3245B79310997B7F61A5178C1E43F4684CCF728601E3BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775230008, "uuid": "438ca2bb-6993-46ce-94fc-751d7cdd1924", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775230008, "uuid": "6669685d-d1ba-464f-89c6-19720a948c9b", "value": "196608:mdbldcsz135+ptPd2Ab+cjHB3nibUVwUjLEP8xqna0K6:EbIsp5+Xd2QRjHJjV1jwPZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775230008, "uuid": "1f295c04-1a81-4f53-95e1-95bf568db823", "value": 9508826, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775230008, "uuid": "489665df-b774-4803-b94d-ab43b157cf45", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1775231027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231027, "uuid": "5dcfba7a-9be1-49ab-a9bb-69146a4e8cbc", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231027, "uuid": "ffdd2471-2267-470f-b4ae-bb2f2fb7442a", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231027, "uuid": "25096ee8-c836-4fb4-b135-95649b4674de", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231027, "uuid": "3ee63e03-9882-411d-bc63-fa9517e0c487", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231027, "uuid": "051d8ca7-2f46-4cb9-8fba-d62348c8e15f", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775231027, "uuid": "e6301540-eff9-468b-9325-97f5e6a5584d", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0aae0f32-2f74-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775231086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231086, "uuid": "eae60668-30c1-4ecd-904a-39cbef9d1337", "comment": "Malware payload", "value": "f29a8073f78052ddc30b7434fa8a8fb4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231086, "uuid": "809672ec-7737-49e4-b476-09e1ae807e53", "comment": "Malware payload", "value": "da39b06af95c311b974503b9c6fb3419eeb8f8874ce5402669aadac232df8184", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231086, "uuid": "8bc9cc28-fd31-4908-9473-f05530e973ed", "value": "T19393E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231086, "uuid": "3ccc2f0a-5e03-4123-805f-88c8b983d2ea", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX9IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775231086, "uuid": "2215211e-1051-4ab3-8ae0-62b46f305180", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231086, "uuid": "80ae5880-335d-44ec-8a44-c80700bcbf39", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cb0c684-2f75-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775231761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231761, "uuid": "209a3841-2383-4324-9601-4ba8926dc901", "comment": "Malware payload", "value": "594703011e62950bea6d513424203ed1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231761, "uuid": "cd7c860f-c29e-4a7f-ad0f-6d35098d6ea1", "comment": "Malware payload", "value": "9e1475d0537749b847cde3c3a8c010c85f12eac02aa93707e25c7a1a0255871d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231761, "uuid": "8ad45f1a-5b5d-417e-8d2d-83e64e252a29", "value": "T161931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231761, "uuid": "9588aabf-f0da-44e4-8c81-ddde67f4a9d0", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKO1sPyK3t8:08jI00GitkbFv2v05xsprg1sPyQt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775231761, "uuid": "57f77a43-0922-4890-9cf0-4e71442d71b4", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231761, "uuid": "91080e18-dd02-43bf-b8d2-c7a4e2fc39a6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f246c9d4-2f75-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775231904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231904, "uuid": "8d158368-6a7b-4b84-9c14-ab567d6fd144", "comment": "Malware payload", "value": "4be523ad30b1b4119c247cd507e31b71", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231904, "uuid": "e330bb5b-f14c-447a-a698-4618e8575335", "comment": "Malware payload", "value": "254ebe2e29035810eb1422737e72b130b5cda3f20f8ce077436690f0cd990822", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231904, "uuid": "40f35a22-41a0-4451-9077-570b128e1a39", "value": "T196B6330E3CD5D1B2C3BC04B900D256F79A2D30A997656CD7BD4EB2AA9E701E1E2315", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231904, "uuid": "35500f54-d91b-4f79-ab3a-8b570fd128c7", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231904, "uuid": "185da05a-1825-41cf-bf56-b004961189bb", "value": "196608:exZm+Ds/6U9nE2e5llLssT2MjatPF3x5XgZ14gX8oA1Rf0Jla:wm+D9U9FU3ePF3rQH4R0Jw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775231904, "uuid": "8630eb19-33a6-4a91-b9bd-1fc922c94195", "value": 11399680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775231904, "uuid": "e9b2bd22-b4e0-4141-b293-96d4ad11dc97", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3445c23-2f78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775233141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775233141, "uuid": "67df92c8-5520-4bfb-9958-bc7a0e751a8a", "comment": "Malware payload", "value": "1be1749dbc21bb22dbb01b93d9bbe9b1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775233141, "uuid": "199f56db-f95e-4ec6-b704-3d5cd790bc8b", "comment": "Malware payload", "value": "f9a97b9d406b0bb384e64fe88f1eb09a29a91306a91adab2575ce6399fca9f6e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775233141, "uuid": "1dfc17ea-757f-4be7-a9fa-7ae0389c7191", "value": "T15F66337FA6832444A59D8747C426C82046D777338E4709D36A0A7CBBC1EE6F2C99EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775233141, "uuid": "7f9b34ef-43aa-4f50-8d2c-19b26a23798d", "value": "196608:6stSqGNSkjB+VoDch5oV7C42c2Ew7ZCMwEXv:ZSqKSkw6io320wkMpv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775233141, "uuid": "061a71c5-af5a-4b68-80fd-827c1bc939e6", "value": 6504784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775233141, "uuid": "7c215a7e-3abf-488a-a82c-95ef6dab3dc2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb9e6c6-2f7c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775234606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234606, "uuid": "0fd2bc5d-82ef-47a5-9fbd-67f9b4946bb8", "comment": "Malware payload", "value": "1e6ddc5cd77af7641f14f9f49895683e", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234606, "uuid": "84956ae1-9ddb-4baf-b5fd-4835820aa5c7", "comment": "Malware payload", "value": "2f77b32d357ee32396ed1724ed88c5c5f9fd8db8cedbd1b07a1bb1d58989862a", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234606, "uuid": "7bafc724-5a2f-4834-b140-c46f75bb90ac", "value": "T133544C4933A450F4E8679239C9A78A46F7B2B855477063CF136443BA6F277E09E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234606, "uuid": "aa47f7ed-8391-43d0-a485-adaf336e0ff3", "value": "a39382452de1c86f6b14ac15806d4523", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234606, "uuid": "3645586c-2643-450d-bd30-c3d4ec3a6bab", "value": "6144:y20XlTwP4g6gim5vGr/bQNnQaT3+21OqIB+PSr/7:y20trQH1KB+Oj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775234606, "uuid": "79608342-f656-4f60-a9c1-07c2433e75be", "value": 284672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234606, "uuid": "87276825-9c04-4c8b-874a-86e1ad88674e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5927bd3a-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "0a405a56-08af-4975-9fd4-ab5e995f8ded", "comment": "Malware payload (Mirai)", "value": "648f9d02dd5e43e132c72ee18949ad88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "1e33b5b0-1430-43f8-ba90-7781ca841617", "comment": "Malware payload (Mirai)", "value": "9247f48ab49076166d113e0711fab7c7f421784ecf8e7a7f5639b717f2db357e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "7b5fd8c4-9ee4-4e07-9ebf-a3e421f00f0f", "value": "T1DE33F176AE521366E4B208739C5D0F829343B7B0D397A23B0459915DCD93207DAECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "9d2d057f-7da4-4b59-ada8-abfda1e60b1d", "value": "1536:O3XPB91L394+PSflPekzOon256xLhRiuft:OVL394+qf9uWx9ouft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237660, "uuid": "9fe8adb8-c174-4c62-9b4c-0b01b395b312", "value": 51096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "5689e522-c621-48e7-9060-eb5b19925711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5928e566-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "d16156a0-dbb5-4457-b2da-fd7b36f696be", "comment": "Malware payload (Mirai)", "value": "35653bf48b20d7d0bca8eb229867303b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "e2ecdc60-6cfe-48a2-9e62-734da34f64f8", "comment": "Malware payload (Mirai)", "value": "d66a8eff096d72081b02ec2b4c2037e724da13305d024b7de4a4c3738c23b19e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "355df75e-ee0b-43f9-82c3-48814d562fec", "value": "T1E6C2F13B849F19A1CE0487BC25A8A94CE6C479AE7F1ADD80812D7D1F1C7326F0B03C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "e859969e-6815-417d-8223-c97cdf976ce9", "value": "384:MgjRX74+nsHnozt48N6ASt7i36htH9vSY3GQODlyQn2fBpMBeq5/GDtygvYKS:tgnK56AS83+SIG0QsDi/GDtygQKS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237660, "uuid": "df61fce3-fb78-475c-85fc-fc5d5dcbb59e", "value": 25880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "81231292-3ac7-4120-9d4e-6d9b09f9fb0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "592dabfc-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "ca09f20e-780d-4326-a476-a41ce9bb5bf3", "comment": "Malware payload (Mirai)", "value": "1c7d39642bdf12fa6e78935821166ce0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "4e77cd16-ee6f-4cde-a6fd-c805a93c38e8", "comment": "Malware payload (Mirai)", "value": "bf274f6580e032bb802de68316f9d8accfdd55187cab378a806ad43296c4be90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "969cd2a4-3189-4e90-b04d-456118dd3d26", "value": "T1C9D2E1632D225716A9310D76A9630553F78DA9E9C39F674B03E90AC376E141BF3838", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "63f46a46-3096-4771-842b-f52d671bc896", "value": "768:EedY5z9VaOtyNpaHzERRKCjvO8a8dmDinTJVcw3yq3UIhQ:EedY5BESzkRm8a8duinTJWGK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237660, "uuid": "16bf5c76-32c3-43fe-937e-a915dfba0419", "value": 30736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "f566e0fa-c46d-4d42-8738-e40e96603205", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "593717fb-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "e44ce576-ef00-448a-a36a-00fb4b95d65f", "comment": "Malware payload (Mirai)", "value": "980105fee76b9b1f7c0195179cbea58a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237660, "uuid": "c1a1f99d-3cf9-4dd6-abb0-5b6e2bfdcf35", "comment": "Malware payload (Mirai)", "value": "dc69bcb799a502c9bb8e9f03576a08a5a7a803149e8b301ebad474cdbf608355", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "f0438097-b7b9-45d5-a8f3-4f9605cc8676", "value": "T1BBD2D0AECE202B4DCDEF8D7D849D2B62ADC151D1222D9A8D63545C1C8705E4AFC4A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "7d412636-02b8-4d9f-aa4f-45ddc7017ace", "value": "768:V5nNf8eZ5Ld/ZG6h/UUwESiSt7ojphWME:V5npR/Z/hcUwBplKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237660, "uuid": "8a7254b8-2816-422b-9084-a7b66fe3c27a", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237660, "uuid": "d00bd21c-d805-4cb2-84be-dfd4c39584a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75cdf91f-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237708, "uuid": "f8603930-f393-4b66-8018-998acb3d3080", "comment": "Malware payload (Mirai)", "value": "dafea7c4bf8f4888677970bb079c3ce6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237708, "uuid": "2dd1a618-3b8a-4712-93ee-1f23aa98ddcd", "comment": "Malware payload (Mirai)", "value": "fc713295897316a62ac2f072ab22775c4be9ae5147fb94af48bd7e657a8d18b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237708, "uuid": "9b30aaee-9439-4552-83fe-f4ba4e3895d2", "value": "T12AC2E195D2450CD4DBEF6E718CC5A3E317E019F4BA96BCE2D280ED42E941BB102F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237708, "uuid": "b2c917d6-36fa-4130-901e-38fdc913e75c", "value": "768:vuG7U8RzULS2kR1jFWDfI32wZ6YcUq4uVcqgw0RNWXo:vuG7kS2cA0mo6Yi4u+qgw0bWXo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237708, "uuid": "46206aea-f236-4b4c-a5ee-00ab0e1d8b66", "value": 26752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237708, "uuid": "7f0a7e83-e3b1-43e8-880f-c826ec8d0178", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7926fb4e-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "a5e68d73-b576-46bf-ada5-7590eafeed46", "comment": "Malware payload (Mirai)", "value": "b5801cd365e4f5aee97629c2af1339f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "7486d852-0196-4d0c-b0f5-abd03a72dfbb", "comment": "Malware payload (Mirai)", "value": "b6f3c909b03cb77db83da429adad2ab06c6634dde3129b146230cf6ee5e7946e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "7a18f4a7-54c9-4486-bbb9-4d71bd05e2cd", "value": "T15AA2D071E550AEF2C1788C719DFA4A421A5A6F6ADD9370705B6C02BCFDB14433AF80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "a6c9aaa9-cd72-4198-9f5f-18ebc8f7f9c3", "value": "384:KB9EFDBvbuoIQ2+EfD50Q1cZgFXCJAH7Fsf9n26h7lRVihoPmLkaxmdGU5E/ln:i9EFNbWOccZ4XP7Fsf95hx8RLZ3UcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237714, "uuid": "c2730a4e-f2cd-44d5-b4de-bf0725ce5356", "value": 21824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "bde40422-479b-41f5-88ce-cbb64682193b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "793f7000-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "ada3b2af-b7df-4fe1-a821-d8dd643485f2", "comment": "Malware payload (Mirai)", "value": "fb4dc02f89538f6151534b0ea462acbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "61aef34d-c20d-4076-a7a4-964834739dea", "comment": "Malware payload (Mirai)", "value": "48515854a0b948442e97d8bbbe26bcab9aa095c71fff2b3ad2424368945cbf91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "c6356b1b-44fb-4cc1-b096-17457ed898e0", "value": "T14AD2E128224A94F5F92A64FD05FE1B4025F64FF3A503AC0EBA5DFA278E510B418763", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "4c2cb2ca-2e1f-488e-bfb9-61620a777cc0", "value": "768:NmQZwJRtaXuEAwmTmTohlEP0ytY5eGLLCBJgGlzDpUYs5:VZwfUuljcohbyioGCTVqYy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237714, "uuid": "aa705bad-706b-4686-b7b0-44d7e34fd07d", "value": 28660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "2218c45d-a01b-4f99-b70f-69fc588a5be7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7942d2d0-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775237714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "3cf8c310-bb45-46dd-a06e-8fc04954605b", "comment": "Malware payload (Mirai)", "value": "e3c9156107b8aef3beab24b4b0c1c067", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "e776947e-1128-40ea-aa24-9a2b507b6877", "comment": "Malware payload (Mirai)", "value": "2f23d74eafdb3a2d175d93c793a82fb837ab3319317658bd7681b723c082a2b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "8764a389-5d9f-47fe-a338-d7384324bffd", "value": "T1BFC2D03A878905B299D40A32D8F6824585132ABC597B30BF27100BBEBBD10DD72FD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "f6f077c0-7372-4308-b032-7048da2d36ca", "value": "384:7c0uLKnLnUCBKBkomFv/UAEEz6BDXEW2q8mEN5IZXP3WEnyNQUQdNRpymdGU5EUC:q4nN8BI/RVu32q8pNufWpIHy3Ui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775237714, "uuid": "02fad86f-54e8-4151-9708-c217b8236ae4", "value": 26056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237714, "uuid": "058f5ff5-f1d2-45ab-91a1-7515f802a336", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66a4783f-2f87-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775239401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239401, "uuid": "7f238e4d-6c41-4e9e-94f6-6538d8780f16", "comment": "Malware payload (Mirai)", "value": "30cc5be6a3ebe186b49b4fd0091bfab1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239401, "uuid": "1b056589-5c42-4120-a262-76584031876e", "comment": "Malware payload (Mirai)", "value": "e4854563e30c099c8e4169fb64909d3076e1142509463f69020cb179cd2a32b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775239401, "uuid": "7fe683d9-7d62-4b8e-8acc-f083baaa70d0", "value": "T11D93F60ABF610FF7D85BDC3746A9070225CC991B22B56B3A7534D82CB54F64F1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775239401, "uuid": "7f5d96d8-4882-4e99-b322-0c9a298719ea", "value": "1536:VRcAyJPntGt0Jgca4J5ztekNUwdUW0QMZP+vpaB+sc:LcAyJPA0JrtekNZdU3QMnosc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775239401, "uuid": "c07adc4d-99e6-44f3-ae78-b67504bd5e61", "value": 93224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775239401, "uuid": "c65fb57e-5c7e-4b22-8a20-0643dd6c24a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786003b7-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1775242867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "ea496e20-403c-44a6-a783-7d67b0dc05a8", "comment": "Malware payload (Amadey)", "value": "2d2ef7c1b0cbd78cd83815107fe413fb", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "2eadb26b-e7bf-4774-bd25-9959b60dfd56", "comment": "Malware payload (Amadey)", "value": "1962b1acb673b0019006aa41c27fd05b25c978625a0e4851632c1cd93f2840f4", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "b5c30669-f734-49b0-9c16-e60e9ac05242", "value": "T1B4557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A62F13FF1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "8ad6d29a-9e97-4a49-bec2-2ba916f7305a", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "ba1426cf-b290-4f01-932f-fb82cfc34447", "value": "24576:7KR0N2OH0RkXyCksn6JCc2RCdErmQ6OtsDw+mHjBjc5:798RGyCkhh2MQ6Otuw+kd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775242867, "uuid": "a7f39161-90c5-4be5-99c3-5c970e9b033b", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "e8f2d63a-1581-4011-98a7-344a6fd64944", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786c8eb3-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1775242867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "cb99494c-79da-473a-84e4-30edf4765d07", "comment": "Malware payload (Amadey)", "value": "e86aa80887267b908c3ce38f8ccfaf3a", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "4032e2f0-9752-4e1e-b053-86d66e97c817", "comment": "Malware payload (Amadey)", "value": "8336adc553a0125327261148e748e1143d1d82a185046949fcc5a153eb8ba925", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "c9a23996-9d2d-4420-b54a-a61213ec1661", "value": "T124358D16B941C071D49411706269BBF2593CAA35672144DBFBD02EF2AD305F3BE3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "7d40310f-fe53-4d5b-9a59-3927c69deece", "value": "a252cd53ebc44617e8418747345d10c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "c2e67934-b242-40df-8429-49bd83799458", "value": "24576:fLCrua2InCFeiwzFJEUoBmeQSM8FSUjzHJI+v:f+ruaRnC0iwzFXSFDJI+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775242867, "uuid": "f6b2c0dd-6178-45e9-820a-5ef54180bd1b", "value": 1102336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242867, "uuid": "a68e671a-ffe5-4ef0-961c-fd195ebae4e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f67e714-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775242932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242932, "uuid": "0080586e-fcb4-4469-871d-ddafceb9016b", "comment": "Malware payload", "value": "4496929bdabf370529a4b1c648116225", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242932, "uuid": "07305397-1ce9-496f-bc0b-73b415145594", "comment": "Malware payload", "value": "acb43101cf206f93d177aff2ef5231e9406d0cd3faf62cf30c2ef1295c9b0d05", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242932, "uuid": "e6e7ce97-6b2e-4d22-adcd-b2c8790df983", "value": "T1F1E6338003D14AB6FAD7E13D46A7E115D2B2F4505B2286CF4BE4476A3F5B2F14E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242932, "uuid": "d9ac6a19-99be-4e58-aa15-2dfe5a77aa5a", "value": "74f4f918cc15caa2178da4a8adcd29a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242932, "uuid": "fe8ea6b4-3059-46f7-9dd4-92463e381d5f", "value": "196608:TCApNL4ztbW897GDr/x7eovq5XMP6PzFcPVz097WpHskNqSPrGuZRjMFqbH4Mirc:E1yNdq1B7iR0gpHskqSPjZpiqbH4a7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775242932, "uuid": "9c62915a-df09-4f1d-82da-407c69a68c1b", "value": 14059008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242932, "uuid": "b4cf0700-773b-4c5a-9ca5-a88d5d2dd8ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5296ded-2f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775248149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248149, "uuid": "40dff39a-2272-496a-8ec4-921037cfbd88", "comment": "Malware payload (Mirai)", "value": "ccf0043a62ef0083d8c6beaf4fe1df90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248149, "uuid": "ab63c75a-d2c4-4a53-bfb0-aa543b21b16b", "comment": "Malware payload (Mirai)", "value": "253ee9fe2fbbd0447a186724de9a352c229872e3e46fd61197c322bc7c9878aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775248149, "uuid": "9bcceb11-4893-480a-a72d-d6370dc34e0c", "value": "T172C3F80AAF210EFBDC6FDD3706A90B0525CC941722A97B7A7534D82CB64F64B1AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775248149, "uuid": "ba451dc4-6e31-4616-9f7c-ef22bb51ee27", "value": "1536:cSCzU1S5+m54kQKr3rHRjGKWr+N/ObxUWzxZbTPT3/Cf5LruOg2w:cSCzU1FpkOWO9zx1g3g3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775248149, "uuid": "0da8ca12-e6ac-4a35-a852-01f41f50c36b", "value": 128284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775248149, "uuid": "3bb0061e-4199-4a91-b078-f7f972d9bf53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe37abe0-2fa1-11f1-bc00-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1775250822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250822, "uuid": "f14580b1-d94e-4b7e-8857-c57528332c38", "comment": "Malware payload (OffLoader)", "value": "af560e5932dca81ab79078569423dc36", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250822, "uuid": "fcf585c6-1824-45b5-9ab1-702ed4826f40", "comment": "Malware payload (OffLoader)", "value": "542be1d36c895eee95b91e241940dd2446cd4097c388b8c5e0e613214ebb8bbe", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250822, "uuid": "59c7f8f8-6fda-416a-a96d-26cc5233b57c", "value": "T1104602E3AE46733DE06A0A3779B2913C5D3B6E11651A8C4296E6FC4CCF3A0601D7E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250822, "uuid": "35d32faa-c138-4d8b-b372-a998fc15bb14", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250822, "uuid": "f23bc9fb-d6e2-4304-b1a1-70177a8ae398", "value": "98304:wN66oTIjw41EPb/lywfmlAq+jaMWicEogcn:koTIjw4uPbdywemqQaMlogc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775250822, "uuid": "4ec34a07-e9fa-4517-ab64-640211fdcb75", "value": 5627014, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250822, "uuid": "07a3c952-2182-4465-ab08-b05e4e36d0e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775174833, "uuid": "114b1d36-2ef1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.143.65:60094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175138, "uuid": "c6d10246-2ef1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.39.28:52208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175669, "uuid": "03a71dc2-2ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.254.120/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775175728, "uuid": "2661e507-2ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.249.194.64:58270/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775176385, "uuid": "ae2d5fac-2ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8514679081/S5M3ryz.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775176388, "uuid": "afbb77c3-2ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.143.65:60094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775176466, "uuid": "de8dfd23-2ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.63.82:41803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775176515, "uuid": "fb9a2212-2ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.39.28:52208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775177914, "uuid": "3dc89317-2ef8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.19:43652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178195, "uuid": "e4e9c809-2ef8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.186:60345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178726, "uuid": "21c75d5f-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.25.159:56402/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178727, "uuid": "220bce89-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.55.10:50528/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178735, "uuid": "26f2357f-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.10.252:58294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178788, "uuid": "463a79d5-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.50:51885/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178793, "uuid": "4960fed3-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.171:33525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775178913, "uuid": "90c31105-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.10.252:58294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179087, "uuid": "f88ff7e0-2efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.19:43652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179333, "uuid": "8b818913-2efb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:47335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179334, "uuid": "8c259215-2efb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.111.225:37405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179627, "uuid": "3a9d22eb-2efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.55.10:50528/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179694, "uuid": "62615b6c-2efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.179.42:57783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179701, "uuid": "66f88537-2efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.56.152:34374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775179750, "uuid": "83bb3be0-2efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.186:60345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775180348, "uuid": "e81859ea-2efd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.171:33525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775180826, "uuid": "050859ce-2eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:33448/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775180833, "uuid": "0936e292-2eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:47335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775181726, "uuid": "1dda8541-2f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:33448/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775181914, "uuid": "8dac1f04-2f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.111.225:37405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775182927, "uuid": "e94e524e-2f03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.29.184:41439/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775183537, "uuid": "550fcd8a-2f05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.72.41.89:56754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775184313, "uuid": "23ec588b-2f07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.62:49224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775184427, "uuid": "67b0efff-2f07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.162:38925/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185215, "uuid": "3d0ec454-2f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.72.41.89:56754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185387, "uuid": "a3e4b621-2f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.6.122:33275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185455, "uuid": "cc8a422b-2f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.6.122:33275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185632, "uuid": "35e89599-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.52.56.85:42783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185686, "uuid": "5644546c-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.193.94:38189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185687, "uuid": "56cca98a-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.179:58225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185818, "uuid": "a48eb5d3-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.62:49224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185927, "uuid": "e584005b-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.162:38925/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185934, "uuid": "e9eecf91-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.215.64:39046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775185987, "uuid": "0931fd30-2f0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.179:58225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775186526, "uuid": "4a7eb5f1-2f0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.139.117:45260/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775186528, "uuid": "4ba522b0-2f0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.205.250:53198/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775187425, "uuid": "62832fd8-2f0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.139.117:45260/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775188027, "uuid": "c979f310-2f0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.205.250:53198/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775188333, "uuid": "7fed8091-2f10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.215.64:39046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775188693, "uuid": "5657714a-2f11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.140:41104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775189717, "uuid": "b88286f3-2f13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.10.255.96:34611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775189787, "uuid": "e2aead2c-2f13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.214.201:36062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190018, "uuid": "6bda124c-2f14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.140:41104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190790, "uuid": "3887bb11-2f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.166.152.13:41396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775190919, "uuid": "84ff4bf8-2f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.216.4:53961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775191095, "uuid": "edc80d52-2f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.79.150.232:60829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775191208, "uuid": "318d31ba-2f17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.10.255.96:34611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775192594, "uuid": "6b77703b-2f1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.147.185:45835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775192656, "uuid": "906cef96-2f1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.184:57359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775192657, "uuid": "90e75b50-2f1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.27.166:38187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775193195, "uuid": "d1a091fd-2f1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.23:35343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775193427, "uuid": "5c49e56a-2f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.167.189.139:50290/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775193552, "uuid": "a6a3999f-2f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:43865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775193618, "uuid": "cdbc6026-2f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.181.44:42131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194033, "uuid": "c4fd69c5-2f1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.195.161:50875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194341, "uuid": "7cadefc8-2f1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.250.108:39147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194390, "uuid": "9a3be134-2f1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.205:52390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194687, "uuid": "4b0c5d25-2f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.52.230.179:44408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194931, "uuid": "dcb12904-2f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.52.230.179:44408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775194993, "uuid": "012742fb-2f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.118:36562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195056, "uuid": "2722e5aa-2f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.250.108:39147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195129, "uuid": "52cb5795-2f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.147.185:45835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195527, "uuid": "3faa61a1-2f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.78.213:38088/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195527, "uuid": "3fbb9286-2f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.77.235.248:60331/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195648, "uuid": "87ad3cba-2f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.135:49136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775195773, "uuid": "d25f878e-2f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.205:52390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196017, "uuid": "63ba1bfa-2f22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.50:51885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196067, "uuid": "81705916-2f22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.107.189:886/wo125u1gmn/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196128, "uuid": "a60b2293-2f22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.64.172:44064/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775196427, "uuid": "5803dd93-2f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.215.182:35556/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775197101, "uuid": "ea122e5c-2f24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.135:49136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775197874, "uuid": "b6dadf54-2f26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.14.146:54672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775198828, "uuid": "ef37df8e-2f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.122.240:43824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775198828, "uuid": "ef3bdc14-2f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.54.191:60222/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775198828, "uuid": "ef6052c7-2f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.190.242:44573/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775198954, "uuid": "3a52019a-2f29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.64.226:41730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775199314, "uuid": "10f5bea8-2f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.151.189:41892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775199370, "uuid": "3274020e-2f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.148.184.156:48791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775199434, "uuid": "58983db1-2f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.14.146:54672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775199553, "uuid": "9f69be90-2f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.176.50.190:34558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775199913, "uuid": "763a5aad-2f2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.151.189:41892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775200576, "uuid": "00f30110-2f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.148.184.156:48791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775200926, "uuid": "d1fbe923-2f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.177:49365/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775200926, "uuid": "d20e5454-2f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.176.50.190:34558/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775200928, "uuid": "d2e95d8d-2f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.190.242:44573/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775201888, "uuid": "0f1283d8-2f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.123.245:37046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775202728, "uuid": "0407bf8e-2f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.177:49365/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775202729, "uuid": "046cf1ca-2f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.235.234.170:48142/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775202729, "uuid": "046e1153-2f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.235.234.170:48142/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775202731, "uuid": "057b8724-2f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.94.142.84:59168/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775202735, "uuid": "07e22e08-2f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.148.134:50951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775203218, "uuid": "27f3f315-2f33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.123.245:37046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775204173, "uuid": "61193776-2f35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.148.134:50951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775204352, "uuid": "cbcc9eb2-2f35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.148.66:60047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775204353, "uuid": "cc8395a5-2f35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.59.219:36235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775204717, "uuid": "a5625744-2f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.148.66:60047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775205607, "uuid": "b82c6953-2f38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.20.61:60639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775206093, "uuid": "d99dc7d3-2f39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.49.72:48413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775206215, "uuid": "224b1068-2f3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.25.133.33:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775206627, "uuid": "17d9ec9c-2f3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.197.8:35114/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775206875, "uuid": "abd50471-2f3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:41761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775207055, "uuid": "16b85528-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:41761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775207108, "uuid": "3670475c-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.244.168:45897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775207353, "uuid": "c8ae4f28-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.49.72:48413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775207355, "uuid": "c997a2a2-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.209.122:46011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775207714, "uuid": "9ff4800e-2f3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:58994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775208126, "uuid": "95898953-2f3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.197.8:35114/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775208136, "uuid": "9b30c6da-2f3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.244.168:45897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775208611, "uuid": "b67f91bc-2f3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.180.87:53047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209028, "uuid": "aec0718c-2f40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.178.175:59096/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209038, "uuid": "b4b6a621-2f40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.205.149:48259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209268, "uuid": "3dbef986-2f41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:58994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775209687, "uuid": "37fee6d3-2f42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.180.87:53047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210417, "uuid": "eb16732e-2f43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.81.75:51731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210527, "uuid": "2c2988a1-2f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.205.149:48259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210528, "uuid": "2d1963c6-2f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.208.154:56228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210530, "uuid": "2e25ce72-2f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.142.105:39717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210592, "uuid": "5308aac1-2f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.241.175:32919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775210954, "uuid": "2abc8353-2f45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.210.133.134:42696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211126, "uuid": "91b38084-2f45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.105.50.190:41719/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211319, "uuid": "0448b6a8-2f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.32.67:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211428, "uuid": "45b78778-2f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.246.118:36800/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211441, "uuid": "4d38139e-2f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.36:57548/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775211849, "uuid": "406b88f4-2f47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.32.67:42919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212039, "uuid": "b17ab8d4-2f47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.11:53222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212217, "uuid": "1b97d0d5-2f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.183.184.74:56089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212220, "uuid": "1d9431d5-2f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.51.138:32909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212328, "uuid": "5de242a5-2f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.246.118:36800/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212463, "uuid": "ae8fcf58-2f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.53.12:41803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212926, "uuid": "c288a154-2f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.36:57548/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775212927, "uuid": "c301e909-2f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.105.50.190:41719/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213058, "uuid": "10e1a3cf-2f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.241.175:32919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213227, "uuid": "75f4d68b-2f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.205:46066/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213527, "uuid": "28bce911-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.146:38281/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213596, "uuid": "51b56686-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.232.118:52048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213721, "uuid": "9c7ccca8-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.48.86:34028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775213833, "uuid": "df0b3c0d-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.11:53222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775214126, "uuid": "8dc43680-2f4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.205:46066/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775214493, "uuid": "688a7104-2f4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:60288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775214726, "uuid": "f36f168e-2f4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:48126/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775215336, "uuid": "5eaeb80c-2f4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.39.122.214:34457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775215388, "uuid": "7da5d72a-2f4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.39.122.214:34457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775215514, "uuid": "c9231a68-2f4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.214.232:52798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775215755, "uuid": "58b77c12-2f50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.64.172:44064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775215928, "uuid": "bf75c723-2f50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.129.27:51569/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775216347, "uuid": "b98f3fe2-2f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:60288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775216827, "uuid": "d7c8f053-2f52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.123.219:48348/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217434, "uuid": "4111ec20-2f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.129.27:51569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217492, "uuid": "63cc5c30-2f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/ln8cw1ox1f", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217620, "uuid": "b06143f3-2f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.132:49301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775217741, "uuid": "f897d228-2f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.31.105:33747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775219422, "uuid": "e267d216-2f58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.31.105:33747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775219769, "uuid": "b0fa4afc-2f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.132:49301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775219839, "uuid": "dae62370-2f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.166.152.13:41396/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775220139, "uuid": "8dd687f3-2f5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.62.126:45414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775220560, "uuid": "8894e064-2f5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.252.165:36677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775221342, "uuid": "5ae1f300-2f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.173:40185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775221517, "uuid": "c2fabc2f-2f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.82.146:38403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775221577, "uuid": "e6a29a5c-2f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.246.171:41803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775223550, "uuid": "7ecc833f-2f62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:36010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224450, "uuid": "970ba8f4-2f64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.254.120/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775224458, "uuid": "9c35a4ef-2f64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.254.120/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225358, "uuid": "b4780121-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.151.199:50227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225416, "uuid": "d6d154d2-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225416, "uuid": "d6f18e84-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "d81a6fb2-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225418, "uuid": "d83fcdca-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225421, "uuid": "da0a2b17-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775225422, "uuid": "da635b88-2f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.57/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226019, "uuid": "3e5a6905-2f68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.163.239:51413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226079, "uuid": "6251f87f-2f68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.33.7:35382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226320, "uuid": "f1c084cf-2f68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/y", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226427, "uuid": "3168d065-2f69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.123.219:48348/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226500, "uuid": "5d014bbe-2f69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.206.240:53385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775226785, "uuid": "06fc9701-2f6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8405865752/bThXxmv.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775227339, "uuid": "50fb2b9b-2f6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.112.189.134:45930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775228056, "uuid": "fcd4b33e-2f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.163.239:51413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775228777, "uuid": "aa7b7938-2f6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.112.189.134:45930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775228896, "uuid": "f141e867-2f6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.208.154:56228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775229551, "uuid": "77c0782e-2f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.10.24.108:44847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775229728, "uuid": "e13ac3a1-2f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.115:33474/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775230145, "uuid": "d9c6c2cd-2f71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/5851730241/IQEr4wy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775230223, "uuid": "085cf3fd-2f72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.252.62:42975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775230627, "uuid": "f8b70556-2f72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.115:33474/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775231722, "uuid": "8584c825-2f75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.252.62:42975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775232139, "uuid": "7e7b19dc-2f76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.95:50373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775232791, "uuid": "0288b2a2-2f78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.32.104:59470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775233043, "uuid": "98f691fd-2f78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.95:50373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775233328, "uuid": "42f2a720-2f79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.222.67:50929/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234177, "uuid": "3d34ab3b-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.32.104:59470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234179, "uuid": "3e3709f9-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.107:54260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234228, "uuid": "5b24c7c3-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.222.67:50929/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234356, "uuid": "a765bce5-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.14:54287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775234716, "uuid": "7e3a405e-2f7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:41418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775235079, "uuid": "564fa95c-2f7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.208.188:38362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775235144, "uuid": "7d611ae2-2f7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.212.110:60017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775235975, "uuid": "6c665367-2f7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.107:54260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775236219, "uuid": "fe33f53b-2f7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.13.149.41:47684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775236570, "uuid": "cf6b1813-2f80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:58071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775236998, "uuid": "ce4fbdab-2f81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.173:56330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237353, "uuid": "a23cbef4-2f82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.253.222.93:39707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237661, "uuid": "596b42e5-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237661, "uuid": "597136ad-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237661, "uuid": "598329ee-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237661, "uuid": "59863845-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237709, "uuid": "75f8cc9a-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "79312a47-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "7946ab83-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237714, "uuid": "7949ca3a-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.102/bins/yakuza.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237716, "uuid": "7a43535d-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.194.17:48843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237779, "uuid": "9fd84627-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.14:54287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775237779, "uuid": "9fe042b0-2f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.13.149.41:47684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775238092, "uuid": "5a90cc76-2f84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:58071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775238727, "uuid": "d4bdf5fa-2f85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.129:45751/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239038, "uuid": "8e9d69f6-2f86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.194.17:48843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239339, "uuid": "41d556a2-2f87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.220:39505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239401, "uuid": "66ec531e-2f87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.57/dipndots", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239876, "uuid": "82169539-2f88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.227.66.240:44373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775239936, "uuid": "a556efbf-2f88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:41418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775240299, "uuid": "7de653fa-2f89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.227.66.240:44373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775240887, "uuid": "dc843a0f-2f8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.220:39505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242279, "uuid": "1a080cdb-2f8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.172:51607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "7866e513-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/Psd8eZaW/Plugins/cred64.dll", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242867, "uuid": "786fedcb-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/Psd8eZaW/Plugins/cred.dll", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775242932, "uuid": "9f75ff37-2f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/run.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775243289, "uuid": "73f01875-2f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775243477, "uuid": "e46b92cb-2f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.144.160:51271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775243649, "uuid": "4ab8d65f-2f91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.214.240.96:47132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775243888, "uuid": "d95e70b1-2f91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:60445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775244019, "uuid": "2769f7c6-2f92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.172:51607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775244796, "uuid": "f6781af3-2f93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.50/rondo.aqg.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775244797, "uuid": "f70d67b4-2f93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775244916, "uuid": "3dc215cb-2f94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.251.50:39891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775245925, "uuid": "97741669-2f96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.229.54:60779/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775246527, "uuid": "fdf77552-2f97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.233:48305/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775246780, "uuid": "94f2758a-2f98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.17:33134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775246951, "uuid": "faa8b8e1-2f98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.139.32.232:58976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775247024, "uuid": "26163ba9-2f99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.144.160:51271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775247485, "uuid": "38f44566-2f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/Leetootoo/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775247493, "uuid": "3de6669d-2f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.166.84:57307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775247504, "uuid": "4499d177-2f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.131:58936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248149, "uuid": "c530974a-2f9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.57/dipndotsk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248221, "uuid": "f016a2fc-2f9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.17:33134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248222, "uuid": "f0a1ea8e-2f9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.36.191:50947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248396, "uuid": "57f4cf82-2f9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.139.32.232:58976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248761, "uuid": "31bd5138-2f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.166.84:57307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248818, "uuid": "5397092c-2f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.167.189.139:50290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775248818, "uuid": "53e2b132-2f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.247:55099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250136, "uuid": "656bba1a-2fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:36912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250138, "uuid": "663f1584-2fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.168.128:50851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250308, "uuid": "cb83a548-2fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.36.191:50947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250726, "uuid": "c525f1a6-2fa1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.99.181.12:49304/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775250727, "uuid": "c5bd6dc4-2fa1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.204.59:52383/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775251519, "uuid": "9d9c783d-2fa3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:36912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775251626, "uuid": "dd2d0ecf-2fa3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.204.59:52383/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775252541, "uuid": "ff0045fd-2fa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.206.206:43250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775253519, "uuid": "455f218a-2fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.120.149:40649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775253678, "uuid": "a456deaf-2fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.236.218:59787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775254159, "uuid": "c334b9f9-2fa9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.206.206:43250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775254159, "uuid": "c340a04d-2fa9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.239.121:39726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775254581, "uuid": "be9e29ac-2faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.247:52744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775254641, "uuid": "e232af01-2faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.33.7:35382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775255228, "uuid": "4083c227-2fac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.189:38137/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775255420, "uuid": "b30814ae-2fac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.143.228:54558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775255782, "uuid": "8aa8d91e-2fad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.239.121:39726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775256728, "uuid": "be49a2c6-2faf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.167.135:35866/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775256802, "uuid": "eab1a233-2faf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.87.186:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257696, "uuid": "ff6e34c8-2fb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:49535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257749, "uuid": "1eeff8bc-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:49535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257878, "uuid": "6b980fd5-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.200.200:57273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257926, "uuid": "888134f6-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.9.35.137:44304/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257926, "uuid": "88974b07-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.167.135:35866/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257927, "uuid": "88f8607a-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.106.222:44249/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775257927, "uuid": "89256f4c-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.158.1:52275/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775258171, "uuid": "1a39ebd1-2fb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:48297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775258226, "uuid": "3b466e1a-2fb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.106.222:44249/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775258953, "uuid": "ec65879c-2fb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.72.116:57923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259099, "uuid": "434eae4d-2fb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.117.78:51454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259127, "uuid": "5440196c-2fb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.9.35.137:44304/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259427, "uuid": "070a5ec8-2fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.158.1:52275/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259428, "uuid": "0771616b-2fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.229:46840/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259912, "uuid": "27fc5c5f-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.108.110:42841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775259977, "uuid": "4eff7218-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:48297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775260030, "uuid": "6e935935-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.161:8080/apt0.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775260097, "uuid": "96881979-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.200.200:57273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775260626, "uuid": "d1d8fbd7-2fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.229:46840/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775260626, "uuid": "d206f6d1-2fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.77.105:42770/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775260627, "uuid": "d228e4ea-2fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.244.180.22:60885/i", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775189706, "uuid": "b21775d1-2f13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.10.255.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775253665, "uuid": "9c74ae73-2fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.236.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775185384, "uuid": "a2203b8b-2f09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.6.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775226005, "uuid": "3619ffa5-2f68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.163.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250725, "uuid": "c4330b2b-2fa1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.204.59", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775253486, "uuid": "31eaf342-2fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.120.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775246944, "uuid": "f6eaabf0-2f98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.139.32.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775177884, "uuid": "2bac5bbd-2ef8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.184.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775259065, "uuid": "2f66c9ab-2fb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.117.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775236985, "uuid": "c66fa48f-2f81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.31.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775235125, "uuid": "720fff18-2f7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.218.212.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775213225, "uuid": "74780652-2f4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.4.205", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775216825, "uuid": "d6382a0f-2f52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.123.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775192645, "uuid": "89c3e1bb-2f1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.27.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775238724, "uuid": "d3552436-2f85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.191.129", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775185684, "uuid": "54f9f173-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.254.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775196124, "uuid": "a3dbb5ef-2f22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.64.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212207, "uuid": "15f81d91-2f48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.51.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775255407, "uuid": "ab2ba870-2fac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.143.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775254565, "uuid": "b51c8d63-2faa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.14.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775257864, "uuid": "63bb9210-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.200.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775211425, "uuid": "43aab393-2f46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.8.36", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250124, "uuid": "5e30c982-2fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.168.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210405, "uuid": "e3de1198-2f43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.81.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775217606, "uuid": "a80fc9fe-2f54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.93.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775221508, "uuid": "bd64c32b-2f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.82.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775188685, "uuid": "519c583d-2f11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212444, "uuid": "a3078f8a-2f48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.53.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775179684, "uuid": "5cdc5901-2efc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.56.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775176444, "uuid": "d1837143-2ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.63.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775184306, "uuid": "1f3614f1-2f07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.99.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210584, "uuid": "4e8d6e2e-2f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.241.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775205605, "uuid": "b69d12a4-2f38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.20.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234345, "uuid": "a0ec1544-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.238.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775259425, "uuid": "05ff674c-2fb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.238.229", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178724, "uuid": "2088c0b1-2efa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.55.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775257924, "uuid": "878b3a7c-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.158.1", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775208608, "uuid": "b458d0b6-2f3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.180.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775211425, "uuid": "43aa9fdd-2f46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.246.118", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775248206, "uuid": "e71b1297-2f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.36.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775215925, "uuid": "bd9e5a7b-2f50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.148.129.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775258945, "uuid": "e7d4c88a-2fb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.235.72.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775254144, "uuid": "ba695365-2fa9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.239.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775194326, "uuid": "73a7a17b-2f1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.250.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775193425, "uuid": "5aaa2e56-2f1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.167.189.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775257924, "uuid": "878b440c-2fb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.106.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775174825, "uuid": "0c24ed4b-2ef1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.143.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178784, "uuid": "4441079d-2efa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775198824, "uuid": "ed234576-2f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.54.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775207105, "uuid": "349cdc56-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.244.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175125, "uuid": "bf148b3d-2ef1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.39.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775213525, "uuid": "2794dd07-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.118.146", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775206865, "uuid": "a5a68ec3-2f3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.30.142.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775239864, "uuid": "7ad40ecb-2f88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.227.66.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775243464, "uuid": "dca4584d-2f90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.239.144.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775260624, "uuid": "d0675c43-2fb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.244.180.22", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775229545, "uuid": "73f47aba-2f70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.10.24.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775256785, "uuid": "e060a656-2faf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.87.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237645, "uuid": "4fdfc05b-2f83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775230206, "uuid": "fdd8b7e7-2f71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.252.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209025, "uuid": "ad5d5bfb-2f40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.178.175", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775237345, "uuid": "9d36d1de-2f82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.253.222.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775209025, "uuid": "ad5ccb05-2f40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.205.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775206625, "uuid": "166725c8-2f3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.197.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775195524, "uuid": "3e2e6d4e-2f21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.78.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775193184, "uuid": "cb5a87a4-2f1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.127.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775256725, "uuid": "bc99596f-2faf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.167.135", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775186524, "uuid": "49a8efd4-2f0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.9.139.117", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775194684, "uuid": "4984a050-2f1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.52.230.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775212025, "uuid": "a93e633b-2f47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.133.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775225407, "uuid": "d17cc0a6-2f66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.64.201.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775236205, "uuid": "f5e2819a-2f7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.13.149.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775232125, "uuid": "75d003c1-2f76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.55.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775247484, "uuid": "38d216da-2f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.63.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775202725, "uuid": "0259736d-2f32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.235.234.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775217725, "uuid": "eeccd961-2f54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.225.31.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775198824, "uuid": "ed233ade-2f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.229.190.242", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775229725, "uuid": "df7564e0-2f70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.68.115", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178724, "uuid": "2088c623-2efa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.183.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775186524, "uuid": "49a8edc1-2f0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.205.250", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775184424, "uuid": "660d8d89-2f07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.162", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775242265, "uuid": "11a16462-2f8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.53.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775260624, "uuid": "d0676604-2fb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.77.105", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775259906, "uuid": "2474124a-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.108.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775213585, "uuid": "4b196844-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.148.232.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210524, "uuid": "2aa514fb-2f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.142.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775226065, "uuid": "59d4fa51-2f68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.33.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775183525, "uuid": "4dc04468-2f05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.72.41.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775195524, "uuid": "3e2e56db-2f21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.77.235.248", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775175665, "uuid": "012e901f-2ef3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.48.254.120", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775213706, "uuid": "935e7436-2f4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.61.48.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775202725, "uuid": "025c89a8-2f32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.148.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775199306, "uuid": "0c34fc7a-2f2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.151.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775178724, "uuid": "20892859-2efa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.25.159", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775234165, "uuid": "35f6d71a-2f7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.68.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775246765, "uuid": "8c01bcd8-2f98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.204.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775210524, "uuid": "2aa52290-2f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.208.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775179325, "uuid": "86703ece-2efb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.111.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775182925, "uuid": "e8151a93-2f03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.29.184", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775198944, "uuid": "34453599-2f29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.64.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775189764, "uuid": "d4c13eff-2f13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.214.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775207345, "uuid": "c38600e6-2f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.209.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775185925, "uuid": "e4366b63-2f0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.215.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775192584, "uuid": "65d5f5e6-2f1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.147.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775204345, "uuid": "c77acb37-2f35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.148.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775233326, "uuid": "417aac5a-2f79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.222.67", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775260024, "uuid": "6b0eb411-2fb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.161", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775232785, "uuid": "feff812b-2f77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.177.32.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775244784, "uuid": "ef733fc5-2f93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.92.1.50", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775191084, "uuid": "e79c1c35-2f16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.79.150.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775190906, "uuid": "7d478c8b-2f16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.216.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775198824, "uuid": "ed233997-2f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.122.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775201884, "uuid": "0cd7f766-2f30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.123.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775248806, "uuid": "4c598cd8-2f9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775221565, "uuid": "dfa1dac7-2f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.246.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775255225, "uuid": "3eaf4b26-2fac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.189", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775204345, "uuid": "c77cc1bc-2f35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.161.59.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775252525, "uuid": "f56903fe-2fa5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.206.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775243645, "uuid": "48076b11-2f91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.214.240.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775206084, "uuid": "d432a0d9-2f39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.49.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775250725, "uuid": "c4328b2f-2fa1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.99.181.12", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775196065, "uuid": "8035ad9f-2f22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.168.107.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775239385, "uuid": "5d0ac638-2f87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.112.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775247484, "uuid": "38d1e472-2f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.166.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] } ] } }