{ "Event": { "published": true, "date": "2024-05-31", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-05-31", "timestamp": 1717200192, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "1b0360fa-aab2-4e21-a357-42187ab87c6c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38795ad0-1ee0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717113641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113641, "uuid": "22e698be-cb7b-46e8-990c-cbc588038d54", "comment": "Malware payload (GCleaner)", "value": "93d733a1bf2229d875d2065798b39106", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113641, "uuid": "66432808-906a-4dd0-abd0-952589e7e6e2", "comment": "Malware payload (GCleaner)", "value": "e751add45d07e8fd107983c00efd39e85bb4da22184668c7b325e97ab18dd254", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113641, "uuid": "61c0946b-a3f2-4360-964c-0b9dc89b447a", "value": "T1DF84AF02B6D0E831E6634E314D6ED7A4663FFD618E296B9B73486F0F15B01B1D6227", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113641, "uuid": "62d076cf-db9d-41a9-b1d8-6f422294571a", "value": "5608b5e25a7505b4514f9e0627e29ef5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113641, "uuid": "b70ac2e5-1c3a-447c-9637-8a29de8c92ec", "value": "6144:ubS9Je5EHMlW4Yv3ZdQWO40mh2jVE2s7A+1Xnd3:4S9Je5EMlbO3vA40mh2jV4Tn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113641, "uuid": "13cae59a-8e25-4eee-af7a-40a7b26f8df2", "value": 398336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113641, "uuid": "149cf815-4c60-498d-9e12-a3372dbd219c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d293ed91-1ee0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717113642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113642, "uuid": "40889efb-b74f-48fb-80ae-31031e0caf41", "comment": "Malware payload (GCleaner)", "value": "a64774c31b7da717dbef2ec69ea8cc06", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113642, "uuid": "f766f0a2-4b73-47fd-a95b-47d1beb0081c", "comment": "Malware payload (GCleaner)", "value": "3194ec72a0a79c8db748e9df3e92de9fd8985e6044f108fc864d3183c621893f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113642, "uuid": "72869c32-58fa-4875-b648-073cc01e3a8c", "value": "T1FE749E0272D1EC71E5634E324D6AD6A4663FFCA08F595B9B33486F8F1CB11B1D6227", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113642, "uuid": "ab4742cb-6f15-4c99-bb75-af3cc6caadf0", "value": "5608b5e25a7505b4514f9e0627e29ef5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113642, "uuid": "b84214e4-aa30-46e7-a2af-6470f8d494b9", "value": "6144:94S9LW6ul3wH145Ot418wn3hJI+LJVn+nnhvXnd3:WS9LW6uZw7thwn3MgJVnS5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113642, "uuid": "ccabc355-d9cf-4895-a10e-75710949cfb1", "value": 364032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113642, "uuid": "01e967fb-dde8-4300-b6e5-289d60120679", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1717113728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113728, "uuid": "8e140166-1875-4a54-8ca6-12693fdf3db0", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113728, "uuid": "463b03b4-a5b1-4f84-acb7-8a1c419ce58c", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113728, "uuid": "0b4e001e-a681-4a28-9812-a145c66527d8", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113728, "uuid": "2943651a-3f1a-4fdb-8c5c-fc0599807b6e", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113728, "uuid": "bcac9471-bed8-4904-9a3a-ffeb9355a750", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70786a39-1edf-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717113757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113757, "uuid": "84b2821d-369f-4d5f-8638-b706b5d2e394", "comment": "Malware payload (Amadey)", "value": "104e856443836b5dd64acf0d5ed38379", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113757, "uuid": "cf19598c-c295-4808-9fa3-c3555e1f4d0a", "comment": "Malware payload (Amadey)", "value": "364a133d55b6086bafa31d8d46a181d2033b72c6aaa99c3d8538f2a7c09aff73", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113757, "uuid": "d89e5db0-e8e5-4d74-bd69-73ea5885f213", "value": "T1BB9533798862767DCC9E88F4DDE34B8FBA713D731F5112C7289A64679F30A905AA04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113757, "uuid": "51a680fe-95d3-4343-874e-701f8ca0e584", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113757, "uuid": "6f9569f1-c6f4-4984-be4e-3ff3651a9878", "value": "49152:Jkss1giynBxgne+vO/gLEJqq+SobKbSsWxBm4:JaqvByD7sqUcdsQm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113757, "uuid": "17969efe-b7b3-40d8-a6e9-4ae45b129bd1", "value": 1882624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113757, "uuid": "30fd256f-f02a-4a85-8922-38a97c84467d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717113846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113846, "uuid": "986a3b0b-9fca-4951-94de-19a01ae2089e", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113846, "uuid": "6b144944-9f10-48dd-81d8-fd0f6410b1e8", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113846, "uuid": "904fe67a-37ec-457d-8740-1ad19a73a953", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113846, "uuid": "49fb07ff-19a3-4c1c-8fbc-3933646531f5", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113846, "uuid": "96e2aa50-14ca-49fb-9236-c60a28f7a94b", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838e4702-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717113939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113939, "uuid": "f2fad0c5-8b06-4b07-9306-f0753c113a87", "comment": "Malware payload", "value": "6da3d648ed891171f95a5634e307262e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113939, "uuid": "af8f762d-22fc-40cb-8549-cebc198100a4", "comment": "Malware payload", "value": "546621d73217750b9975ccc9f946810bc387c9067bf5a5a1539e0df4fedb0adc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113939, "uuid": "bd165633-adaa-4c82-bbb2-326327b0874d", "value": "T18394BF0276D1E871E5634F364E2BD6A4263FFC618E556BBB23486E0F14B12B1D6237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113939, "uuid": "4b8cc3e8-b5dd-4f7a-8f0a-26f427ca1ecc", "value": "5608b5e25a7505b4514f9e0627e29ef5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113939, "uuid": "49888186-138e-491f-84e8-ec6cee44e339", "value": "6144:DUS9qnscYOT5umBgaiqKmOfL1JP98agzAJ5DbAAf5Xnd3:4S9qnsLOkKniqKrLPGzq/AMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113939, "uuid": "0482d542-13e3-4037-b4b3-846bf2100988", "value": 435200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113939, "uuid": "54132396-df1a-4b49-90be-29ad09af158b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1717113968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113968, "uuid": "69fabeda-951d-40ba-a176-432a2af5c46a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113968, "uuid": "cce1f0ed-4c31-48e5-a5c4-6fdab78dad89", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113968, "uuid": "c98ab42e-96cb-4d34-b2c9-a0ff1cd48bec", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113968, "uuid": "2fbc63c5-65f6-4dab-876e-e04bc3309270", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717113968, "uuid": "fad32558-5dcf-45b7-94d9-ab67c2d02977", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4785ca91-1ee0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717114019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114019, "uuid": "d31d31c2-ad28-448f-9dfa-387959c282c2", "comment": "Malware payload (RiseProStealer)", "value": "be49ac418959705d20f029634d85040f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114019, "uuid": "37696ed5-7fb9-47f6-b985-5476d6756f8b", "comment": "Malware payload (RiseProStealer)", "value": "08d34452a1fa343f4047a98ec0e037f7de798b75a8740b3385f5742d54396e8e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114019, "uuid": "c14821f3-82da-429c-a0b0-19131d2327aa", "value": "T1A3B533C5AD3C8A2CF66EDC71ACD4137525D86CC4C837A9B7F90FA3448626329B3A85", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114019, "uuid": "e89aa95d-4507-4f4b-bb28-0186b9598154", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114019, "uuid": "d0d3d8f4-f7d7-4aa7-a755-552427702ed6", "value": "49152:2kmKhyq24kI3qebVay+dsHKhmFFr/QfT+pMCSTq66SQdS:2kmKEqlkAbkynqhmFr/2+1STq6ag", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114019, "uuid": "0b546730-4691-4d37-b847-498bf1961194", "value": 2380800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114019, "uuid": "8344dd7d-6326-41fb-96be-cd8eb1f0dc1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44d3fb4a-1edf-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717114037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114037, "uuid": "72d0525b-a2a7-4797-94da-02ce7f23d3bd", "comment": "Malware payload", "value": "85d6cf6654492780b26bb9ed64ae24ab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114037, "uuid": "b25f1008-8db9-46ae-9964-3cfdb5291dfb", "comment": "Malware payload", "value": "7a0b0fb9ea0009a2533df194555b6a13767e9f9f860276da5cc59d119c61ab75", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "c5ece610-6cdb-4c79-b011-af3e4e84a76b", "value": "T153B533B256F154BAD2EA21B3D052E118064FF36C8C6604DB3E0E783949E277F9B19F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "f52e32bb-8382-40ec-aae5-ca74083fa2f1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "1b098bb8-a7ae-4f6f-85c1-0bda0fe84d1e", "value": "49152:0d+n2BsqGNvDL6iGEwr4lHnuSVExpJuSipXyzgz0x0MBo8xK:0nH2KiGvGHuywJuHlyDBk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114037, "uuid": "6b18e309-53d9-4394-94d2-ffedf023c311", "value": 2424832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "328c40de-8a46-4179-8284-70b359a18830", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be2cae5e-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717114037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114037, "uuid": "4600912a-6d7c-4fa6-9f3d-63a9a2927372", "comment": "Malware payload", "value": "f75b6c59b0a588f5aa42cf6fb6539043", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114037, "uuid": "fd7c1f45-7607-4f09-8ddd-b183a2ade3f4", "comment": "Malware payload", "value": "c7a2921bbadcbfc75d36adc7043f430664782392bb855b7acdd0631e1b7c5735", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "edc735da-0bac-41aa-a9cd-392a69a37113", "value": "T118159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "f83694b3-a71e-424d-a8a1-14cb795cc121", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "f99ae15f-910f-493b-925b-48c464110aba", "value": "12288:CqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T7:CqDEvCTbMWu7rQYlBQcBiT6rprG8aA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114037, "uuid": "c87770e2-f5b5-4b2b-87f4-df74059c2c65", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114037, "uuid": "5806ba5c-1d54-4071-94f4-3f800de73317", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51636746-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717114284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114284, "uuid": "cd5a70c5-c076-41d7-a59b-66b4483d65b0", "comment": "Malware payload (Stealc)", "value": "235d27b53dc2b8d752ba9c93cc487d12", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114284, "uuid": "bb2e005f-bc84-40fd-831a-af2da063e6d0", "comment": "Malware payload (Stealc)", "value": "47adbbcf9bfa8fa4665866c5bd53c03f4a24b5ede12276336321f7dff141bbc7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114284, "uuid": "582292a5-2388-4006-b753-b135a08dc221", "value": "T106749E0276D1D874E563DE324E6ADAA4263FFC608E195B9F33486E0F19702B1D6237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114284, "uuid": "58cd347e-f1b0-4532-aac0-3db1f035ad92", "value": "5608b5e25a7505b4514f9e0627e29ef5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114284, "uuid": "6f6be019-7287-4667-a6fd-85c8863eed98", "value": "3072:ekMjTPSBPURtnuZo3JhJFUYVTj3+yQF4Hlfa/OgJE7FPcnzTrXLXaqGS+VrElz0d:0PS99i1Fb5/iJOFPSPl6rwzDkaSXnd3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114284, "uuid": "5d8c3202-8a98-4af2-bbd4-704c77a6f554", "value": 338432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114284, "uuid": "be12cc54-dee7-41a2-ac7e-7f23ba99381d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75a9e4ba-1ee0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717114397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114397, "uuid": "cc58250c-a329-426c-8f45-81f70c7d442c", "comment": "Malware payload", "value": "253188a3dcb26d41c2b23466b503ea9f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114397, "uuid": "cd66ff4c-1af7-4284-ab2d-8ad7b1971e2b", "comment": "Malware payload", "value": "5abed68e0f3672a6f7815d78a965bf3979139814f8b42c62c9a79eb8cf8fc085", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114397, "uuid": "75822180-3212-4eac-a01b-5fd6fb518eac", "value": "T1D445BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114397, "uuid": "bc80e486-c281-4869-80dd-0503f133def0", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114397, "uuid": "796ee920-e876-40a5-a4cb-bf3a383fa71a", "value": "24576:BqDEvCTbMWu7rQYlBQcBiT6rprG8auo2+b+HdiJUX:BTvC/MTQYxsWR7auo2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114397, "uuid": "b1cc6915-9e58-4bda-8fc7-4e082fc42eb3", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114397, "uuid": "edfc217a-74da-494d-b515-cb58a90ff882", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717114445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114445, "uuid": "8ad574e4-d7f9-4f63-9af8-56c774f7490f", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114445, "uuid": "e9455c96-4279-4edb-ad1f-60b1a1cb8b1e", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114445, "uuid": "0fb2140a-f967-45ff-badf-c23c71c2b3e0", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114445, "uuid": "62130b45-d35e-41d2-88e5-b46687024cff", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114445, "uuid": "cc354032-78d0-4871-a8cb-d7b80598bd67", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15dea308-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717114699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114699, "uuid": "6d314ea6-8133-4121-8a8d-8dc11612ca42", "comment": "Malware payload", "value": "2a472b0954f553609e93a5c151638c78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114699, "uuid": "44626fd3-ab63-47d7-88ae-1a3dcbe455dd", "comment": "Malware payload", "value": "ff7be862ce8598ec2193df64170942518445c558bfd6b13b59453f1ea0b5aa9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114699, "uuid": "f1341ed0-8603-4894-9a07-7a1ad6811d08", "value": "0B42C1462E9C3B07E4A187F1FB396E76B2046E9E672F980BD954243150F3166F500C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114699, "uuid": "428ad79e-8152-4843-bda1-7830f1d67549", "value": "192:YTmCc4HnYXvQ2mDuYedvuXH2oLxZ6qSAM9vrqj7/sBJ6HGpTJDqiwOrvw9Bpjdy1:YTYXvQDuYY2xZ6VTgDK4mpwTl5ye8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717114699, "uuid": "67ad5cf8-95b1-43fc-a413-90fcf6a3d6d1", "value": 13032, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bad5c13-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware payload (PythonStealer)", "timestamp": 1717116127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116127, "uuid": "21bc9534-9169-4cbb-b56d-040d89d57635", "comment": "Malware payload (PythonStealer)", "value": "c09ff1273b09cb1f9c7698ed147bf22e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116127, "uuid": "2a434d06-44ce-4d05-90e2-76c09a462a87", "comment": "Malware payload (PythonStealer)", "value": "bf8ce6bb537881386facfe6c1f9003812b985cbc4b9e9addd39e102449868d92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116127, "uuid": "c8ad6b69-85c7-4a8a-a79a-13558627cf79", "value": "T127B63353D2F3498DEDAB99F825F651CAAA397E2C011089B75BC163A03347B814F9E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116127, "uuid": "62916ba1-c9d4-4f7e-8f34-e53996cf17df", "value": "e44f44f1060dd800fd861c4e5ad59e21", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116127, "uuid": "390b7194-d6c8-4e81-bfe2-7873f48d4d39", "value": "196608:JYPBUPXmkw/NHIAj3DxH9pIKwp4+WY6Z0sU+FNuQ4zOZ+1ak3Yzb5:JYpe25NHIAj3D1rf+WYwUaMrz5aP/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717116127, "uuid": "133be806-1aa4-4a9f-afef-84c882413792", "value": 11256832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116127, "uuid": "9aab7090-d4b5-413d-816f-2a605a653533", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fe63805-1ee7-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717116429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116429, "uuid": "6edf24e9-8789-4455-b3ff-1446a6d2f5e1", "comment": "Malware payload (RiseProStealer)", "value": "749073f260169957a61c1b432f666857", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116429, "uuid": "8ae9d571-7b8f-4bca-8379-037490c2598e", "comment": "Malware payload (RiseProStealer)", "value": "2c8153f6f636f81331153a773085374ee43e599a141acfd005ae9834070fea45", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116429, "uuid": "02d57ca2-c576-485d-958b-2ad90a4ebccb", "value": "T1F184221962960747F99B82F24401D7C33BB9AB1B12A3FFBE458D81589D631C532F0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116429, "uuid": "01b6769e-7526-4d9a-9c79-12a35b415bed", "value": "6144:sPUazQ01x/lSfL8f3lgBBRRrPzXSqUmH1cSHdQSFaK+0pECz6lqQUc:21Sz1blv9Z45qQUc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717116429, "uuid": "03593a79-481c-4b90-9a7e-ca0fd9b955ae", "value": 382413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116429, "uuid": "df8113f7-6c5d-493a-bcc7-abd7d04b0b4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717117409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117409, "uuid": "7e1076d5-5a82-4aff-9446-a433806cc13a", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117409, "uuid": "09d70fd3-6f2b-4980-8e63-ef159397b8c9", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117409, "uuid": "38a1b1e8-015f-4a31-a663-18058e573d3c", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117409, "uuid": "7343b806-c640-4134-b021-9569206b1240", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717117409, "uuid": "a7278835-d971-4050-8ebe-c544643dc474", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6bfaa0a-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717117568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117568, "uuid": "a357175b-dd91-47da-a6a6-f08fe8e6e9c2", "comment": "Malware payload (Amadey)", "value": "d9b5bd7a933dc1dc54c540b1d5e1a7ac", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117568, "uuid": "f1e3f1e1-fdf5-477b-8e21-98ff9c8fde10", "comment": "Malware payload (Amadey)", "value": "34301350bdf40a7bce830286b61489bd0eab21ed770ed668d5ef739726acf6eb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117568, "uuid": "81f174df-0070-491e-bfe7-539c21b21304", "value": "T109953306BDC3FC9BCA96DDF4082A4295F734AC38E0A9CA6639559138F717EB1E40D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117568, "uuid": "29de27a3-536a-407b-9e70-42a64727f84b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117568, "uuid": "0fd1db81-2cdc-476f-af00-9be54b23c477", "value": "24576:Mw1CO7I7ljsEr2GdKT27n9VdRxXiu9OmVMpyLAGLobOimmzKZBRbZ+:tX7MQErAKz9HLXR96ybeOVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717117568, "uuid": "c880f8f0-9abc-4779-9c66-9ca6ceaf3b78", "value": 1879552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117568, "uuid": "611df5d0-3159-45ee-a9b2-e842e98e9161", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717117573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117573, "uuid": "be4b3af1-1aa3-4550-af46-1a8381b11cbe", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117573, "uuid": "6538cd33-f8fb-440e-9ec9-05c2aad4711c", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117573, "uuid": "2967cacf-4b4c-4c07-a071-6f8c3f72fd0b", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117573, "uuid": "3fed4d93-bb41-46d3-a42e-fa527d53dca0", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717117573, "uuid": "e83a400b-1b3f-4db9-b7f6-f2a7c8139d7f", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf9ecfbe-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717118335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118335, "uuid": "b0e430cf-ba1d-46ea-926a-9948a187726a", "comment": "Malware payload (Stealc)", "value": "1babb458bd44f63e531ef3417d4a08a5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118335, "uuid": "99691f2a-48b4-4a12-a75d-a1c42009a5ec", "comment": "Malware payload (Stealc)", "value": "0dbcfce9a77b407f53b36954ed647b6bdd56148dcec8af90ff0ca7f980aa3f28", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118335, "uuid": "f0491252-8f0b-423e-b09d-a28cc9b24155", "value": "T197A5CF2FB1A38836E1F2163D9C6B5764452EBA033D38FD463BF41A485A7714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118335, "uuid": "dce6aa03-6536-4348-8522-c53453ac78f9", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118335, "uuid": "42626b81-45ac-4f2b-8ad8-1a65aec983e2", "value": "49152:eqtdPVosJEsz/+VHA58ljrIY+96lJS9bZ:e6d9fJVc7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118335, "uuid": "716e8a26-5b0f-4c8b-be98-0a6aa7b60fe4", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118335, "uuid": "ad493f27-168a-4552-ab9e-b8b3a0bc203f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4f97e04-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717118371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118371, "uuid": "e49195cf-67fd-451a-a84f-10cd7dd295a8", "comment": "Malware payload (Socks5Systemz)", "value": "1b2eee5f1567bc8f7a4863927184a496", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118371, "uuid": "1f462517-4530-49f5-83e6-d111660858a1", "comment": "Malware payload (Socks5Systemz)", "value": "d7825ede2f1c77d355a222b96b82077f23e5b1540a766fedd4db8edccc059673", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118371, "uuid": "f9dc0440-4424-42d8-97d3-3d67181cf9e3", "value": "T1B45633A6193F9C77C391AEF13F3CE0AE5A982D682731203F534CCE964F4A3165554B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118371, "uuid": "2350dc53-0ed4-4183-a343-c50c8737dffc", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118371, "uuid": "00703341-3d22-4e13-bb0f-615e6c076d36", "value": "98304:mhdvMQXKPd4aSMdvJGGv+dm56Pf9gt9BrbaHMe/3c0S+pFgXK4TXicGXkkJZuKg3:evvXGRtvJdCvPf9Q9BCz3c0XpFP4TXi+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118371, "uuid": "6bf55223-a086-48c3-b84c-c027fc1bf9e1", "value": 6049784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118371, "uuid": "5e2d0f59-2ffb-49dd-a401-7123943894b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717118531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118531, "uuid": "bb21edbb-0576-4ea8-b83a-1347fd0205cf", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118531, "uuid": "61247bbf-a052-4c0e-bb6f-4cc81e7cf05a", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118531, "uuid": "5b245432-785e-4282-a36b-d714c1ccf00f", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118531, "uuid": "a811e63b-6250-46b7-a58a-3a264a3f00fc", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118531, "uuid": "ba5160cd-455c-41e5-9295-691689019001", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "688612c4-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717118618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118618, "uuid": "65fc5bb8-aef9-4b5d-881b-c77115e9e687", "comment": "Malware payload", "value": "c5fe55f024cef6613c1a651400af2d5c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118618, "uuid": "2a1eb66d-e50a-4a61-8dbb-5144379673b1", "comment": "Malware payload", "value": "b49149c658a17a07030a054f2dc3fb1ad14d311322e2a34464c2cfb3b7447a49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118618, "uuid": "f320dffd-7a08-46b0-a4bc-e3da305a9e09", "value": "T14DB533110F170E5EC18646F8E9F3BA1DBC7A6DD719E7636F2880008497BB59B6D71E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118618, "uuid": "e3b12551-8305-4d19-9577-4d4153c6ae98", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118618, "uuid": "d63cf866-817f-4ae7-a08c-ee5eba2da851", "value": "49152:WV6B8TlICO8fBQ3XdYz2q7fWFkCB1TkfVNxWu7xH8fBZdke:WVg8BO8KHdUTWFbc9zWnRX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118618, "uuid": "d1998f07-0b1c-4be1-8db0-92762a88be10", "value": 2457088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118618, "uuid": "cdee67cd-0e99-4848-a3b8-d28031daeffd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc8f80e2-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717118759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118759, "uuid": "c7d6ebe8-89ef-48a6-a714-db6443e17cda", "comment": "Malware payload", "value": "b369c2fc31a40df983780820880e1a7b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118759, "uuid": "848101d6-a9d7-4125-8e81-d4162fc917ab", "comment": "Malware payload", "value": "d4ff3ad69100f25e5f6d8af78b4ae800a1533769613ff366edec4a7a5e753efb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118759, "uuid": "3f267d34-a0cb-4c97-8ebe-d5c3e46f6e18", "value": "T1B9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118759, "uuid": "a8ed93b9-aac7-4193-b335-a859d3b36395", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118759, "uuid": "dba7613f-cc63-41fd-9e9a-b8ce9561724a", "value": "12288:8qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TX:8qDEvCTbMWu7rQYlBQcBiT6rprG8aAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118759, "uuid": "94ff5ff1-b490-48e8-93dd-0aa69d2afd3c", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118759, "uuid": "c50bf012-13a2-4958-9384-68a879ee446f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5e71fe8-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717118802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118802, "uuid": "a1c63d79-86c5-41e4-9ade-3cc977e9ea23", "comment": "Malware payload (RiseProStealer)", "value": "a700b2f3215f3947f14473f47170eeaf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118802, "uuid": "d71e12f4-844b-4d18-9b37-191b4e8106cc", "comment": "Malware payload (RiseProStealer)", "value": "a72b40ace5e6df4ebdcf707ba4d6b4b051ca4de4eb76a398ee00afa0c6c5d6dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118802, "uuid": "08490792-6fe5-4a4d-a8de-60a661e4b9b0", "value": "T1B0B533C78E704434CF6DDD7698D31F9822F0B861DA817E3B64CA351F8E91A287B92C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118802, "uuid": "4d1ba0a8-cae0-49c6-9835-75b0bf06a1ac", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118802, "uuid": "79ac0336-54fb-412a-95b6-5534e08b0af0", "value": "49152:CkmKhyq24kI3qebVa/WGPzrb0kgpmXi13RMlbWwmhL64qEvLZ8EaE:CkmKEqlkAbk/WGPzr46ShR/wmhW4qUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717118802, "uuid": "9c5f815d-4cdf-4a45-b33e-0e9563904f6a", "value": 2375680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118802, "uuid": "e7140014-e2e9-4eae-8e3b-8444b5351d86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bedb070b-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717119192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119192, "uuid": "46d60e8e-d796-46b4-a240-626b4cc2bded", "comment": "Malware payload (Mirai)", "value": "02a097062da9f565e79ba2c00af6f7c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119192, "uuid": "d819e82f-034b-4930-a0be-db8387e94764", "comment": "Malware payload (Mirai)", "value": "2fef0e92aafb0d204a7ef49636daa2bbeb180c32e2250e13cc08d98cb9ca41af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119192, "uuid": "d2856c71-213c-4118-a388-3fbee0509492", "value": "T17A03E0C6A9116532DFE16C3DA236009366A55779C0AA370572B047DC9FF1B01F4BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119192, "uuid": "8f65bf4d-6c3f-43c7-8b1d-c0546b4daf1f", "value": "768:irlB4bUZRIMTKyaqsD73mgwPcq3UIEf4Sqe5f4XbUeLW99tEsT0+:i5Bj9TKyU7WrbET5+bP91+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717119192, "uuid": "5ba874f9-3dc3-4df6-9086-aa5496c24e5c", "value": 41052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119192, "uuid": "b07fd701-478f-4c88-b13e-275a8afc2576", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119192, "uuid": "450bbd39-0d1e-49ea-9a0f-c22c0c49ea1b", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf0abcd4-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717119193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119193, "uuid": "d040b329-6137-4460-b6f6-8d8ba362ebdf", "comment": "Malware payload (Mirai)", "value": "eda7fb4d91fe80eba0e745b028e96f9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119193, "uuid": "3802d9dc-6f56-4fb0-95a9-60e193d0bcb0", "comment": "Malware payload (Mirai)", "value": "4f3b6f2823037a0fb1640bbd47e1b0debe494c6d0aed22430254aaf18fbae393", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119193, "uuid": "43db3fb9-f42e-460f-bd76-e3bdf0454168", "value": "T19A72D083F0C03E4AE138A5372573B69BB60E1EA0443B451DD9EF66025E9748FE173A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119193, "uuid": "d64937b1-c5cd-40e2-8afc-8cf1d44e3b25", "value": "384:43ZjVkxCC1zH3QWIgCxHJIrS3kz6k+AEjsL4:SZCxC0gW1CxHEaw6TTsL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717119193, "uuid": "c2b43ec5-0a79-4c6f-950c-0dd6b7e05ae9", "value": 16444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119193, "uuid": "414ad501-b68b-4634-bfab-4e785dbf7d08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119193, "uuid": "9d18d3b9-a8a7-4242-9e61-a1c913bba8a9", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd3fddb8-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717119243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119243, "uuid": "e5513547-541f-4a23-889b-205155602793", "comment": "Malware payload (Amadey)", "value": "611ee5d9f6a6491dc7ee3224ea68e77c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119243, "uuid": "5f540c84-50f8-473a-bca6-4650651b0efb", "comment": "Malware payload (Amadey)", "value": "b2e7774867311abc1d40a394e338077643ee807ef30423274d024bfe3f2d66fb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119243, "uuid": "aee6c69c-1e2b-41d9-8158-14af95187d67", "value": "T1BE9533862DDA0073C48F973F1F675E0664E5EB83B4DB022837D6457D227DAEE09E62", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119243, "uuid": "7d1ab384-48a6-425e-8613-588d4c2d90ac", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119243, "uuid": "3a8590cc-d5ac-4141-a49a-c3a537cdf637", "value": "49152:lCwLfKAcoGCudK4IN8gP9S9RMxUy+q+NBY92qhs:wwLfTgKNN8gP91mqUBQ2qK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717119243, "uuid": "b30ebefd-fca0-427a-8fd2-22457bd83ec5", "value": 1897472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119243, "uuid": "950fa393-7536-4a5b-a92e-2a3783c96993", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01b36752-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717119734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119734, "uuid": "5b792567-cb02-45fc-ac68-cf14f4f23a35", "comment": "Malware payload", "value": "1608720b9ceef8fc67b7856d8b6adcb9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119734, "uuid": "2b939acb-1d7a-4ce9-b295-bb2999d45e59", "comment": "Malware payload", "value": "2f686deb5c84193d46202b02fb0f51b53bd5efc4fdf48548a4a70bfb3db9d05f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119734, "uuid": "1b63dedc-75b8-40a7-b9f3-8b706a7daac2", "value": "T11A45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119734, "uuid": "5d977b16-f674-4564-9f81-d10eea0ee3b4", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119734, "uuid": "597dd2f3-5033-4f3b-93c8-6b4933ff80d8", "value": "24576:JqDEvCTbMWu7rQYlBQcBiT6rprG8auz2+b+HdiJUX:JTvC/MTQYxsWR7auz2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717119734, "uuid": "6c05de84-7fa4-46e8-bdb7-288681e1be06", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119734, "uuid": "9cfcb739-dcf0-41ca-9c14-5d7694137ccf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c65838d-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717119912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119912, "uuid": "23abfe8a-e993-491f-bf22-778dcf0d6ad0", "comment": "Malware payload", "value": "ccae30788f4e85c07d21409c52929bd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119912, "uuid": "3e819caf-2dd7-40fa-b215-2809e792173a", "comment": "Malware payload", "value": "7e5e0829f6c6740ffe91307ec3783172517b812de9f348fd98374b1a66b1237b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119912, "uuid": "3bd2376d-be82-414f-8949-fcea118f143e", "value": "0EA2F18727983743A46355F4F27CBF8A72023EADAFBE582B40453163706311FA60887B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119912, "uuid": "e8a27098-238f-4c03-8d22-f5ae7d035358", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9Lrg:YTYIDfYG6ZmewZ59+Nw1qsRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717119912, "uuid": "7f3ffa95-fde7-41ea-84c7-326a7de12347", "value": 23168, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "167d087b-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717120398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120398, "uuid": "81a5b854-5fb0-4c74-a391-696f29cbc795", "comment": "Malware payload", "value": "94ad481914185828386b1000edb2edef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120398, "uuid": "ff8fd842-1185-4e66-855f-6768ee562b57", "comment": "Malware payload", "value": "1f48514510e82de6011f281ac4c134c3ee3bcf8f928ac14ffef4fca3ee0bdc59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120398, "uuid": "1cef5955-07e9-4756-aada-c1db724306be", "value": "03A2F146269C3743E56255F5F37EBFC9B2026DACAB7F582740582123606315F62088BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120398, "uuid": "997c34e8-8c4b-4e86-8e23-64abcbb355b8", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qsy:YTYIDfYG6ZmewZ59+Nw1qsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717120398, "uuid": "7a6ffffa-78c6-46d7-b919-e88ce6c89adb", "value": 21720, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b5da9a8-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717121066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121066, "uuid": "8386739b-20f9-4834-8062-fc597c58773c", "comment": "Malware payload (Socks5Systemz)", "value": "4a353b3f7f482566c070b239c5a6cdb6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121066, "uuid": "58fa1479-5087-4604-a6d9-8b25d0ff30e7", "comment": "Malware payload (Socks5Systemz)", "value": "dba7daaa020f8e374a9fcc5be935efa76b2ca05b337ea3c6ebe36cec3fd890db", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121066, "uuid": "b2ed1e5f-beb9-414b-b587-c080a8bb1876", "value": "T1494633029DDADE31F2E856B01974F06201BA70F245E9ED54B9AFA38CCB8FDC0559EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121066, "uuid": "fdd3232a-bfd8-49db-ab0e-10cd84fd3366", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121066, "uuid": "c90d17e5-a883-423f-84a5-433cf2910c84", "value": "98304:mB9Yc1R15zQCnPAflxby8j5Q0C6CKswkJaNKWyXwSy+Qq+FEkd4NrE3:sYkxBn4dN9Q0xCEkJGKfXyRmkdCI3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121066, "uuid": "ef7203d7-cb01-40d4-beec-5db5170bd8d7", "value": 5797383, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121066, "uuid": "8af6b540-ff7d-45aa-a331-c7df7b7de285", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3966ea54-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717121116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121116, "uuid": "0a2b48f4-d00c-4db2-a61c-e661a4831ebc", "comment": "Malware payload (GCleaner)", "value": "4b639fa4b53ebb236e0e07395e1e2393", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121116, "uuid": "a7a370ef-37c7-4bc4-ab7f-022f7f6a59b4", "comment": "Malware payload (GCleaner)", "value": "3c195593808549d5441dbc38f0df010629889f375c3f5901dff0be8b8bf171f6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121116, "uuid": "e7bd137d-7d6b-4d80-b057-b0424cc2a49f", "value": "T16684BF0273D0E871E5634E324D6ED6E4663FFD218E256B9B63486E0F19B12B1D6327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121116, "uuid": "f9daa922-0c51-4b6e-a8f0-38c4cf88383c", "value": "9b90a9a45a511f58dd0e24fa886d768b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121116, "uuid": "3f9076dd-7ce9-49dd-a3b5-0c449bb18cbc", "value": "6144:hr99V5fXfIOsdExxqzAjY5SxTZXndeTn:V99V5/fdsOxC5SxFnU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121116, "uuid": "357792ed-8cd7-4f35-9f60-61b49e8ee194", "value": 396288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121116, "uuid": "b96b3cb0-d81c-4994-afdd-769c590f9065", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cc8cabc-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717121122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121122, "uuid": "534f585c-03d1-42eb-ac57-bfc5f43e590e", "comment": "Malware payload (Stealc)", "value": "91d8b52e4e69f329372d2a01b2b671be", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121122, "uuid": "16715a3f-19aa-4e87-8134-6351529e42e7", "comment": "Malware payload (Stealc)", "value": "ca88d3fce100429498cd5c77a448af39969d6d9613a6471c2b0aeed337bdd20b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121122, "uuid": "00ae95cd-93e6-4879-8b1b-ea9348643f15", "value": "T16B649D0272D1E875E5234F328E5ADBE4663FFC618E595B9B23486E0F15B12B1D3227", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121122, "uuid": "bba7e4f6-7366-4346-b522-cce2a2370aae", "value": "9b90a9a45a511f58dd0e24fa886d768b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121122, "uuid": "725b694d-07d5-4e08-b5bb-e9caf0d7e022", "value": "3072:WcqjPeF9BPqwaKKZWwT0iLYRJ+1NU0IbUGvBYYgTKt0+FYqPY09MNckBJ5D/79X+:tF996DTBu9v4KtTFzPToD/79XndeTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121122, "uuid": "654890f5-02fb-4521-8b79-96e928812d7c", "value": 336896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121122, "uuid": "4b3dbff6-719e-42e2-a1db-063ac0a5338a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f6443c-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717121328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121328, "uuid": "66a2ae78-4914-448c-9a3c-1a3edf4cb7b6", "comment": "Malware payload (GCleaner)", "value": "4ab995af4a75323b48a8d7635e6652d4", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121328, "uuid": "fde3a755-8c92-4fb2-9f78-3265da2817d2", "comment": "Malware payload (GCleaner)", "value": "089f8505c63e022d91f247a17bc20a96cddfc8e32ab5283fd49cb766dcf87d40", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121328, "uuid": "dac0b838-29ae-40b0-a4ec-56713d1be245", "value": "T1E4749D0272D6E870E5634E364D7AD6E46A3FFD61CE195B9B23485E2F04B42B1D2237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121328, "uuid": "48142f96-912f-4e02-8099-6600c6061c11", "value": "9b90a9a45a511f58dd0e24fa886d768b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121328, "uuid": "0886ab45-cafd-49c2-aacb-f4e89614abe4", "value": "6144:sF99QsQSim5rxDeWIvjxmwLTRlpqNjJFxprUXndeTn:Q99QDPm5rxDeWIF13RuNzxpmnU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121328, "uuid": "f718bd19-ad10-4795-bffc-cc415989c2cd", "value": 363008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121328, "uuid": "18106399-86b5-44dc-9308-c8f819f7d2cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08bc2e0b-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121464, "uuid": "b4448d4c-9adf-4d74-b726-253d6e19bacf", "comment": "Malware payload (Mirai)", "value": "924e3200c646ea2975b4b576e4482784", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121464, "uuid": "fb8683d8-379e-4cdd-8477-086c74b37ae6", "comment": "Malware payload (Mirai)", "value": "2484098baeff77c4fb0cd14c93dcb124411dca027ae235eeb4faf6325a79f667", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121464, "uuid": "d8b8e344-aef7-4d87-b9a9-de114215d139", "value": "T16DD3C389F964972DC7E372FFFA5912CE322A0B9CB7EA71219E340B5137C4B5568391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121464, "uuid": "43219898-d4bd-4001-9512-0aa3909bc5b1", "value": "3072:8e79ePP2lhLr7rsUeb4F4Bwqyu1gCaJWgP1Slv:8FWrr+bdKFu1LatSlv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121464, "uuid": "00f54d68-bceb-4e40-8fc3-f57fa8632b16", "value": 131584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121464, "uuid": "ee8145af-904a-4c4f-bb9d-12c4990be7bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3680e8cf-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121541, "uuid": "7944227d-da65-4052-ad09-c2026ca3e832", "comment": "Malware payload (Mirai)", "value": "c2654edfceb90b67749a5cdf5d5371d2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121541, "uuid": "78dcb0f2-3de9-4643-a280-04a1d29c3874", "comment": "Malware payload (Mirai)", "value": "bc6d75880ff644bcb7d37376582c74b5598ea00f667a38d9df828da8758f24a3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121541, "uuid": "688316c7-b261-450f-8abb-f4e1c0b18799", "value": "T110F3525B7E109B2DF768973006F76D28C34923A72AE2D94AD18FD6001E7131E6C4FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121541, "uuid": "2e1c84d3-bb51-40e0-8a89-620ffbfccbc6", "value": "3072:bybqHJCTsrbqPygrUdH1Nyj3cD1J9dFL01pdTXrHCyG2Fb1l/WAsj:8qpCYqPygrUz5dhipdTXrHCyjFb1l/WR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121541, "uuid": "88760bff-cfe3-4d9d-bdf7-e4a4bd111979", "value": 161488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121541, "uuid": "bf484b55-a4a0-40f0-9822-25c8ae5287a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121541, "uuid": "8a4b6a1e-fb7c-44bd-8767-bbbfd3ffdd8c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b6e3694-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717121549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121549, "uuid": "a2120c59-9bf5-4a1e-9c46-80084d07162a", "comment": "Malware payload", "value": "2c005b5b0bb97168274df732124608e2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121549, "uuid": "92396a64-eec0-4c7c-a87c-644103ce4868", "comment": "Malware payload", "value": "45b5074728c239f6cc15d3c6f30fc91d9271085d080765c5e5924326391db846", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121549, "uuid": "0c1ed430-0c32-4f06-b767-ecc3ca85fc58", "value": "T15794BF02F6D2E8B0E5734E324D6AD6A4663FFC218E196B9F23485E4F15742B1D2627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121549, "uuid": "1b3409da-086a-461a-a6d8-5cb2977dc2f4", "value": "9b90a9a45a511f58dd0e24fa886d768b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121549, "uuid": "6a5238ba-9bfa-4621-bef3-9a959e30beb1", "value": "6144:SN99gm9vbLnfTr7wuFwBvdX7KW9WmEFAH6NnoonhLAOWUNmXndeTn:699gm9zLkuOBB73WKMoIhLV8nU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121549, "uuid": "79a5abc6-1efa-4837-a2e5-cd7e672736e6", "value": 434176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121549, "uuid": "ecfc7a14-5067-421d-9424-c13167d3fbb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4648971e-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717121567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121567, "uuid": "d410d889-f5c8-4faa-8e3e-e04df616d966", "comment": "Malware payload", "value": "924ce2973bb54c84f75c5df94b9ae216", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121567, "uuid": "e66a7e9f-22d2-4684-9c61-6b159bdce629", "comment": "Malware payload", "value": "f40c1c508be79b825c6d389c6b58ed7e26da0ed27e9a939fc9a7bcb3d725b3cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121567, "uuid": "67fa06d9-88c3-429f-bb0a-6e9fa719128e", "value": "T127634A45E742D5F1EC0345B0206B6B6A9B35ED324424EE6AEBDC3A76BD32F02D4172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121567, "uuid": "2506a9cf-6453-4eb6-8eed-f10afe1130f6", "value": "1536:03V6/Rkc48eaT6Rl+Q4XmQk6OGEjfIEGUJ31k0fM5r:03V6/Rkc48eJl+Q4XZ7QLduT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121567, "uuid": "0179660b-023e-4082-b433-bbaec1e7b6ab", "value": 67032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121567, "uuid": "7c92cee8-1f94-4bc3-b31f-b017c32f35d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121567, "uuid": "2ae53346-9fe5-4c5f-90fa-4f6781d468c6", "value": "t12031f3fa2dea0de8b7d14848c65f5bd32a59c63b3990767482a3e43123f2e519036c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70b25d3d-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717121638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121638, "uuid": "c9a63971-838e-463b-b7dd-abb2d0f07ac2", "comment": "Malware payload", "value": "36526aba48185e5327e44ece88443e77", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121638, "uuid": "3f50e5d9-ea43-4a51-8ebc-3ec34728eda3", "comment": "Malware payload", "value": "ea05bcc84597889fafebfa0d64edb3b2896dfcb349c259b51b21aa5d9a27ad40", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121638, "uuid": "3d6cf929-503e-49b3-b8bd-8a7be15e0750", "value": "T1D1F2F106EE428344CDA2F07DE618123964632857D21E8D87B7DD0436B9EB35DC16EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121638, "uuid": "04d74cd4-697b-4021-950f-330acd9c0fc0", "value": "768:U+IOC07FTtmN7zmhZgaYHWyLCWLV2K5SeF8CPh4koqc0:lIOCKByzxD35r8CPRV1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121638, "uuid": "0910318f-d3d3-4c72-98ab-46bf63a33cde", "value": 34684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121638, "uuid": "c02bdab7-fada-455a-b9d5-c85335f71933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d54e094-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121660, "uuid": "b1850d35-f401-46bf-a6a9-3788286939d1", "comment": "Malware payload (Mirai)", "value": "a29c084abe5489857908bef3916f1e43", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121660, "uuid": "3fe1bf29-9a43-4e64-be4c-7ae78f499fbc", "comment": "Malware payload (Mirai)", "value": "c9b9ff380122e5b4820cbf41e969ca195881c4eb4f07d7b6e80c62c87e8d50ab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121660, "uuid": "bec6c341-ec56-4ec0-8fcb-7b1a7a267ba8", "value": "T15EE3C449F954AB2DC7E332FEFA5A02CE322A0B98F3EA70219E354B5537C8F5559351", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121660, "uuid": "025de0cf-42a1-4586-a534-55f50482b319", "value": "3072:dZHQo4GcisEY1tXNufAqPRFYT3qSlPYQMKkw6zT2aumgMtFxZC:d3cV2AYRFsaQPYQMKkwUT2avVZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121660, "uuid": "4c97d9a1-1a8b-4dc6-99f4-75da3ec76465", "value": 145080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121660, "uuid": "12acd675-76f6-4a12-88dc-b7ddc7907e39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f5dcdb-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121679, "uuid": "1dac1f16-8992-4441-97e1-1a207e2f0abf", "comment": "Malware payload (Mirai)", "value": "2f60dccf69f03e6bb88a0e58c01395ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121679, "uuid": "7c33f18d-3b4f-4c8a-b884-d88b7d155e77", "comment": "Malware payload (Mirai)", "value": "b869e2ed9b820e7f154dbcb8a1be79fe0b20f9d0c0ddcaf33756f4f7f509797c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121679, "uuid": "e3d6aa8f-8d46-42b8-ac24-55b347570b55", "value": "T1C9A3482266390B27C4E2647951F78B76B2F91FC92874820FBE615E8D7B249E031933", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121679, "uuid": "96d751b0-eb54-4b31-8503-67c255686a79", "value": "1536:yshwi2kL84dItxRelYUOY6nH+XRotXIzzJbrwIREtrodc:ysJHItLelYBYpRTzJbkINi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121679, "uuid": "3a4b9826-8065-4a39-97e8-8308d964dc1c", "value": 104636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121679, "uuid": "7b18d3cf-b623-425d-a76c-88645a6392c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ea49c76-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717121715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121715, "uuid": "1c8e6286-3c1f-41ac-86f5-02de5179b16e", "comment": "Malware payload", "value": "1feaadc4ef680976de450846b86f64bb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121715, "uuid": "7c416c37-5a0a-4f1e-9530-5561cd0b3232", "comment": "Malware payload", "value": "03e4d7e75534971d4c4c956ffe0fa4f94aa95b698425ccea946ed363a1091daf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121715, "uuid": "f84155c7-78ee-4420-97e0-bad39388b589", "value": "T1B656330DB6D097A0C1B62A3580A6C6FF1A6D3D4E07F849BBA2F134D90D3F290E5799", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121715, "uuid": "1d76024b-13cf-4c20-9944-b6fc613bedba", "value": "e72c3bfcbb77a361abf35cfdb2b95db2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121715, "uuid": "a66f129e-ac98-4998-bf2d-d54bd5ddbbd1", "value": "98304:6PbWMBPF5kcwoPllMWHubXkTZONq0d6NlPf9//KJ+PUigzFGxchaNCYs6CfTL:+bTBWoP1HOXfZ8bntw+EFGxcmCYst", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121715, "uuid": "f8ee073d-e6c2-4ea1-b9dd-4987dfb8de16", "value": 6282448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121715, "uuid": "5dbba6d2-55c4-48a2-9448-ae1ceea8afe8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8aa47a8-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121813, "uuid": "4679a6d9-84a2-4bc7-b8e5-871d6f48e04e", "comment": "Malware payload (Mirai)", "value": "6566cf222ee9a98bd63c45680c20e017", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121813, "uuid": "ef7b1979-0d1b-4ff0-9bbc-e994dbb3aa9f", "comment": "Malware payload (Mirai)", "value": "d5684e4ebf0e747b9f369222b5f4493252cafbbfe19097d6ec9e5fc0d26fefdc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121813, "uuid": "c4b05c73-fdcc-4bfc-b435-e439b63fa4b2", "value": "T151636C45E742D1F0D807447020677B6A9B75DE329124EE5AEBAC3E7AED22F12E4173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121813, "uuid": "95adc731-a981-41ec-9435-d81b603a60f3", "value": "1536:HlwfB9GCy42+6ixPoxgTeDyiKEVIbUU/31k3/IBhWr/:FwfB9Zy42fxgTeGWVCugW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121813, "uuid": "67113977-49b1-44af-8e72-520fa5b78b9d", "value": 67064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121813, "uuid": "3a5492f7-3e28-458b-b476-c16efecd2710", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121813, "uuid": "f3532b1a-0e52-43a7-8eda-77bf14358c63", "value": "t18f31b0b66dab08ecb7d05848c21f6bd32a19c67f3950b6b082a3a13123f3f519475c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc2d93b4-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121819, "uuid": "3d9992b5-4911-46f3-9a10-2b9efddb3985", "comment": "Malware payload (Mirai)", "value": "cd28f2c556f6c2f9e1ce28d752294ba9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121819, "uuid": "4cc17cd4-ad03-4f34-af3e-194244150efc", "comment": "Malware payload (Mirai)", "value": "6219bcf7e56d403d8d6b5b4eb0369c44946654914d5f987cf76491dbc3057b47", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121819, "uuid": "1ce29dec-7172-4aa0-ad47-0025491bee89", "value": "T14E934BD7F801D9BDF84AD6374C938D09B271F2A00F930B766217B66BE935198192BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121819, "uuid": "34248dc8-ac4e-4e5c-b3c6-4db6ae7217a1", "value": "1536:T+J3Sn0GnLAQU7rnPHn97gg8GQc8FFoSSQeuacWjcW0JcWcBavT+URtPhpqMZUmw:T+dzsETPH9qc8FF9SQeuacWjcW0JcWcD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121819, "uuid": "d7a9b4e7-3661-4b71-8365-5ff9d6434a3c", "value": 94528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121819, "uuid": "0f632b51-9ea0-4703-8d02-a5c754bdbb2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1acd7a1f-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717121826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121826, "uuid": "6f193130-6912-4359-9c60-0093fcdca129", "comment": "Malware payload", "value": "0b7d75ede5ebf26c2f342393e183c759", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121826, "uuid": "46e80ace-795b-4d1d-92cd-2f02bc1dbce5", "comment": "Malware payload", "value": "2ba4279e22ff69d536b87ddb82aea991fd6453c78d81d0a59f6dcfe8e150bfcb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121826, "uuid": "b2c80264-3426-4751-8d41-0e29b09347e4", "value": "9D62E0472EAC3B07A46259B1F73C7E59F2011EDEA66BA807D1A8652360B3126F510C3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121826, "uuid": "019cb90a-6006-401c-8775-bda411871872", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWr:YTYIDfYG6ZmewZ5U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121826, "uuid": "96c709d9-f33a-4a08-a507-69207af79c85", "value": 15928, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9a4c3f6-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121841, "uuid": "6a965d73-baf4-4c3b-bbbd-55c4015e0415", "comment": "Malware payload (Mirai)", "value": "1ade651b8fa25f00e8803d0aa9220163", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121841, "uuid": "9b3070ee-15eb-4bb4-8d55-594e8ffcc988", "comment": "Malware payload (Mirai)", "value": "9a92080d2f645a4fa92f40ba5cd57208a82e62608443d54028b07502c878355b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121841, "uuid": "8c1a786e-9850-4e7d-9781-4e0e75c58d28", "value": "T108833A01B7180947E6B35DF03B3F17F187AA9E9221B4A249384FBB45D6B2D361486E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121841, "uuid": "c9b90b8f-7150-4cb7-a55a-b0acf931bb1e", "value": "1536:1nm9KoUNV2/yJ1yOehwe2vq0cKiEyMcN1S8FH4QUQY/t2MB/8H/cr6:1m9ovGz12vTiJbit6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121841, "uuid": "b19a92b0-5ef2-46a6-a799-06ecf264b31a", "value": 80792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121841, "uuid": "af4238a9-0078-40b6-b38f-28d6be495702", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2332540b-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717121938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121938, "uuid": "dac02eb0-ba06-444e-878b-9ba3acf7d6af", "comment": "Malware payload (Mirai)", "value": "f24cb6a1bdd773e82ac3ed90e5bd6aac", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121938, "uuid": "1562da20-80d7-4588-936b-1a49c0208ce4", "comment": "Malware payload (Mirai)", "value": "47a62097ee909e5755b06cba9284e0c9377e9a3f0889de22b3a70981f24827b6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121938, "uuid": "2482b2eb-73f2-4906-ae18-7edf1800791b", "value": "T1C0932946BC818A16C5C5577BFE1E028D3727539CD3EE32039D25AF6237CBA2B096B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121938, "uuid": "5ebd28e0-6d0e-4424-a435-3a1895f64179", "value": "1536:trbWnDIyR25szme6PTBxGs8LS4fD5CpwC8kIvZqxGRFnpp0vsloNBrA6UFvKD:trakisszmPPdMvNCpwRNBQqFnpp0v3rv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717121938, "uuid": "293e6b5e-32d2-42d4-8a79-2bd637de9b36", "value": 91288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121938, "uuid": "0fd525e8-15de-4d31-be81-416b7298968b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121938, "uuid": "fcf6cfe2-10f6-4266-91c6-8c6b9e5ac2e3", "value": "t150c08c770ec02bc986b52b0609ca72948ee0a9b01f8486a85dcc8602452b293b10a1", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92c56745-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717122125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122125, "uuid": "135d0c64-3b0d-4d62-bf48-539ca0b01f06", "comment": "Malware payload (Mirai)", "value": "d854076cf2dec5d6f61b5c83c1721a1d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122125, "uuid": "4fa5f3a6-490c-424e-85d6-ef73fc556849", "comment": "Malware payload (Mirai)", "value": "9ff4143a106f8a277ecc90bda82e8bbbe4f9a7a3a557b3fb6520cedc38356e9f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122125, "uuid": "40870855-b089-4664-9afb-57b4eb2e4747", "value": "T145931996B8C29A11C5C512BEFE0E118E3313676CE2DE73139E246F2537CBA6B0A374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122125, "uuid": "2e3c8834-c840-487c-88ca-d9ea17331a76", "value": "1536:NPpnw9kKoyk2nBApJh/L7yAu9PyusEGYMNsxamvM7imL3gJnaCyhow55HYVD:NS95kUkJhu9lmZL3glaCUl59i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122125, "uuid": "c94f9249-2678-4be8-9f7d-4618cf035526", "value": 91444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122125, "uuid": "fde9a830-1682-4b06-8650-80218bd5e788", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122125, "uuid": "795ebe6d-3679-4a73-b38c-eed6778ade89", "value": "t1e6c08ca14f180acc5780834515da02205f8430b94a85d8ab1c5086120411bd9f6a6b", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d77fc868-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717122240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122240, "uuid": "0e05272b-c130-4201-8922-a846664cfac4", "comment": "Malware payload (Mirai)", "value": "4044ab97cc48956899e83808f2d2c84e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122240, "uuid": "50e2fff9-ac22-4d7b-80c9-2b992f43bdb3", "comment": "Malware payload (Mirai)", "value": "8ec75a52758c7b5e5bbae24557e50cba233f053ecba719d6336cce158ca219a3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122240, "uuid": "4a40e298-64d9-48ab-bab0-cf736d4a734d", "value": "T170639F21E4643CB4C8111AF870B0D9B583616EF240DA2DB1EEEDF5921863EDDF98D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122240, "uuid": "33ac693f-a496-42a4-9d5a-a30aaf1d8742", "value": "768:1BW0w605qUEJCt2TlLBfnoBbpfFTS/L2X7MJh30hHSPZAy9dyBqTF97kcR4crgni:1An4UEAelLhopTTLE0hH41FlJGnejr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122240, "uuid": "e2219842-2b87-467a-ba0d-e154d525dca3", "value": 70364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122240, "uuid": "f8d35c72-8f28-4298-83db-b96426e8dac9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3db851b-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717122288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122288, "uuid": "229b20aa-e9af-4c90-b01a-4538da946ba6", "comment": "Malware payload (Mirai)", "value": "810aaa191bb23c4465ba9ed47c20bb2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122288, "uuid": "d3c70109-c7f5-4145-a59a-bd23bacf40fd", "comment": "Malware payload (Mirai)", "value": "5429f861c8ea004b6f09a1df76efc608aa931790945d0723838c3fad1d9bf411", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122288, "uuid": "f0b17bb2-765d-465c-b93d-af3e0ba027bb", "value": "T1B5E36C536683BABCF1A200F4D69363EE39B3142C1F9ED2F17982A53BA7612C44579F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122288, "uuid": "ffc95a81-c13a-4779-b448-40026d82d952", "value": "3072:bQH/NveQCIBN/yk7TtFZU64RofYMVx4gMVqg:O93Mk7hFZUBxM7WVqg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122288, "uuid": "5215ec10-fb3c-4d68-9aad-508fa2034489", "value": 149040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122288, "uuid": "34010089-5f18-44fe-adeb-6924419e3a7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59b513de-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717122459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122459, "uuid": "c84391de-06ed-4db6-b6bf-65011b7261ba", "comment": "Malware payload (Amadey)", "value": "d2a409e155ab998c4d40764dc9c63ca5", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122459, "uuid": "19f996c7-6281-4192-aa3a-a7d2483abdab", "comment": "Malware payload (Amadey)", "value": "64b8aff2336d546817bd7bf6d763891f03d53eed90e84d004db0a03a050788a6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122459, "uuid": "b329d654-7da8-4031-8224-7c54774ba24f", "value": "T1FA9533925B2142EFEC6BC030EF3A2214E79C5161FBD649F41EC403BD5ABB69335815", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122459, "uuid": "666cd039-459d-411e-8cf1-e76b0d12bf67", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122459, "uuid": "7525201d-da67-4c34-92a1-6839f1bc3532", "value": "49152:5ao9Z/ramJh0fh7WbfMym6EFB0ce/qFPDE+dsSHAwNZrBJyz:AgZ/rnJh0ZCTMymne8b3rd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122459, "uuid": "a19e267a-f3c0-4362-90cb-a5fe7522ad13", "value": 1878528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122459, "uuid": "1f305c66-2767-4c86-9938-e3048ddbef3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77759963-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717122509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122509, "uuid": "f260ca27-6920-4f5d-8ffd-b2da3b4a18a8", "comment": "Malware payload", "value": "39ff0cc4a28f91014077e8b6a2d1e8fd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122509, "uuid": "066fa36d-4a82-463d-ac94-698987fd5efc", "comment": "Malware payload", "value": "4463bcec32fc84787f31349315a8ab1fe7307887e7fb2335be1b12f445365784", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122509, "uuid": "73d54aaa-71c8-481d-9860-f68fb9f0d2eb", "value": "T1F7159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122509, "uuid": "ab17c214-aead-4205-8443-f199903f501a", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122509, "uuid": "cbe7edb7-aab7-4fff-b97d-f3175a326cf0", "value": "12288:EqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TH:EqDEvCTbMWu7rQYlBQcBiT6rprG8aAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122509, "uuid": "5de29e4a-84ee-44e8-b0ec-b505e5c8d3ef", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122509, "uuid": "276bd689-d036-414b-9b1a-65f15950ffdb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93131312-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717122555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122555, "uuid": "4f9080e8-841d-4869-b6df-1de11945a014", "comment": "Malware payload", "value": "c2f84349b6600523459d47f86e99de1a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122555, "uuid": "48b722f2-96fe-430a-9493-2ee3c876b857", "comment": "Malware payload", "value": "c7af742e27904f8dbead20c6b01a6c02abb29c075e176c2fe00489d4a62094e6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122555, "uuid": "0dde05b1-e190-4d66-bb8f-f72c3f287f8a", "value": "T1D545BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122555, "uuid": "0758580b-41ff-445e-be78-b7490c2e0418", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122555, "uuid": "f68d3bef-335e-4427-b431-0ee226704b2f", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8aut2+b+HdiJUX:dTvC/MTQYxsWR7aut2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122555, "uuid": "907b1b95-a61f-4e34-a045-3fe1c8380d69", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122555, "uuid": "ebe107fb-4891-4fc3-82e4-9af99fafc089", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3df73d97-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717122842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122842, "uuid": "6770b82d-1009-49ff-8d95-0af63f5dbc5a", "comment": "Malware payload", "value": "1dd5b91d8b33ad3f5f630bc2866c06de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122842, "uuid": "cca0da54-a35c-47c4-ba53-6fdc9c944bbb", "comment": "Malware payload", "value": "b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "82aa8a90-6dc1-43fa-af36-646f09fe7f88", "value": "T19CB5331ADA8A47B5EE0D697002B7851FFBA46847D06B13BC202197F1E277F23D6114", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "177ce048-4b8c-4525-9f82-64a0a1808c76", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "54303fe9-da6e-4d1f-beae-63aa1e802514", "value": "49152:fYw4Y8sCtxe3QO/Xg33B7qI0ag2qYPV1cD4kiGXt6R/VZR9sfA:fYw4Y8sCO/iBOD9SckkiGXtw/XR9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122842, "uuid": "33d7a0bb-82e7-4157-a4cc-56b72098cbce", "value": 2445824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "07ced439-c8c1-4a91-b9c3-415937530e04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717122842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122842, "uuid": "dbee7e45-3f1d-4ef7-8a0c-74642dc6fcbd", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122842, "uuid": "c022518d-53db-4a0f-af7e-c5ef97e875a2", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "5248e0ed-bb97-4389-880c-7b1d2f9e69a5", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122842, "uuid": "8b3c011b-fd62-46fc-b547-fda0bd397637", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717122842, "uuid": "44ddebf6-8194-4b07-980c-e438d2a5ad5b", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d431305f-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717123094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123094, "uuid": "3bc6b31b-b18b-4621-913d-56db15c3d31f", "comment": "Malware payload (Mirai)", "value": "dac1c423de98fb0575ad41989231f6c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123094, "uuid": "95bdaf27-7167-4869-8991-007372c3469b", "comment": "Malware payload (Mirai)", "value": "29866f6d51987d93baadb3478ef1c2ae91172d1d74e1bbeaf7ea8d4efaf8da8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123094, "uuid": "7889cb4b-eff9-4cec-8227-34e41c6482e3", "value": "T164633903E98040FDD086C1B49B5F9523EA32F9BD12357A5E1B95BE112E36F211B2EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123094, "uuid": "491c3c86-5feb-478c-97e6-fd27a15740c0", "value": "1536:Pu76O9gCuOKj30FYUYvDQrlaLaXD68hkbpwr:PumOVFm30FYUVah6D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717123094, "uuid": "2851ab78-fb75-4e50-8410-02ebde8a5e7e", "value": 71104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123094, "uuid": "29848163-d8ad-444c-8d1e-e7af1fee9c06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123094, "uuid": "bceacf30-2c9f-4edf-a2cc-04de6cf4143e", "value": "t1fa2132722a9a29e4f2fbf633a342e4265cb11e5004f071e299b179f6d7627800e349", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2b084e5-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717123145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123145, "uuid": "70f9ad31-4e87-428c-a18e-8b903ac0f518", "comment": "Malware payload (Mirai)", "value": "e01e2032574db431f3531974d79a8359", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123145, "uuid": "8c9611d4-1538-447f-99b7-d4a62e85760b", "comment": "Malware payload (Mirai)", "value": "8ec9872671ddf91c38a9a509db3202baf2e59cd864c8a925b6cc64ff76b8c227", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123145, "uuid": "719e6fbe-a5dc-42a3-88ca-13a354071a82", "value": "T19AE36286BF903FFFD81ECD3742959B05129C99192295BFB72A38D508BA4B10E49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123145, "uuid": "0f76d6a7-9d64-4ee5-a861-8abc414aa95b", "value": "1536:NBAFfPBjKKTKq3oDoN3CXiAoQ5+hdybDrVBrmOxUf+DsElZEuSr:NMPB/TYoNSXsO+hdsrDUf1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717123145, "uuid": "4f70ccc5-0d3a-4ea7-a47f-38338554b181", "value": 153296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123145, "uuid": "54b786eb-29da-4e7a-9f9c-6420dfd3b735", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b5b35a3-1ef8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717123777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123777, "uuid": "ece12964-3b56-4b22-9f78-617acdb580ec", "comment": "Malware payload (Amadey)", "value": "147a39f0af4a339039d6ed9f3d6ad743", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123777, "uuid": "af4faea9-3dab-406d-bfef-38fc9fbd69db", "comment": "Malware payload (Amadey)", "value": "09877a0ec18311250e6ab373ebe0cca2a8f3f17646b2d56ed3f0b1ebc74327ba", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123777, "uuid": "2f90b140-7e2c-49f5-ac42-a246ef786d6b", "value": "T1009533876D677C3AC533243A51F01154A8E941FBBEE929A83E144332F84AAE1F8E1D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123777, "uuid": "ade8751c-3af2-4d39-832b-ccf0e696e075", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123777, "uuid": "e57cb632-6dcf-4df9-8a7a-afed6f501b10", "value": "24576:8h09xg/zB6RQ7SysY8YoT/PugOhvCv0wQdAoMZrVw31THDeLSSKeSjqmCcg7jqCT:k09xg/zokU5TFO0rqoVXWS2jqTcq7X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717123777, "uuid": "1d7219fc-1247-4150-8675-2a15230c8901", "value": 1918976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123777, "uuid": "d3319e93-fa02-44d3-9326-bef398e588a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e79b02b5-1ef8-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717123985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123985, "uuid": "41c62ae3-718a-4c78-bcf0-c54bc8d2a4ca", "comment": "Malware payload (RiseProStealer)", "value": "a99fac5e444ddb8c90c09fb80d234edb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123985, "uuid": "4a6db17a-3637-47c3-894f-c111b2031dda", "comment": "Malware payload (RiseProStealer)", "value": "02f0cf70765f6cc6d054468e68a129b312ff4e5d7168830afe72a8a83cbdff18", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123985, "uuid": "d2d6cf20-74f5-44b5-81ea-ab0326836c8f", "value": "T125B533D74FA44936C16C9DF618758BA629063ABA4224EB93F24F4AC0131375FE3CD9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123985, "uuid": "46a6b3c7-7c86-4359-9def-baf39836c5c6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123985, "uuid": "2f7d7611-fdcd-48fb-94ba-009bdbbab304", "value": "49152:QkmKhyq24kI3qebVaCPhFSCEfMVprgKEaTtisviPGsomF:QkmKEqlkAbkCJF9EkHjHhYLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717123985, "uuid": "a7bb8915-031a-477e-9448-3f20a515f93b", "value": 2372608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123985, "uuid": "ec6861dc-0914-4399-8f27-6db6567dd22b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717124292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124292, "uuid": "1af5a383-b909-4278-92cb-612662929cea", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124292, "uuid": "94e9b1cb-32e1-4258-b03f-27c1d82352aa", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124292, "uuid": "2c7e8635-ac58-4fb4-9908-c1c14da9279b", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124292, "uuid": "2e6d7c3b-5f5f-4b8d-8349-fda50d4b58cc", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717124292, "uuid": "3b573b99-0e3b-43fc-9ba3-2a48b7e146ef", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717124767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124767, "uuid": "e7336801-2aff-4744-91e9-46f772570888", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124767, "uuid": "f1a1edd5-09bd-4aaa-bd7b-b2ea978906ec", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124767, "uuid": "381a72a9-1f84-4e4d-bf3f-9859eac43326", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124767, "uuid": "6e27c395-bd3f-4d08-bf8e-2a3db25c190c", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717124767, "uuid": "4c79c9d8-8b2b-456f-9fe7-7d8eee0c9a31", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd00b40b-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1717124827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124827, "uuid": "1950d7a5-f5bf-4280-9e0e-4aac31c506b3", "comment": "Malware payload (RedLineStealer)", "value": "8ccd94001051879d7b36b46a8c056e99", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124827, "uuid": "1849b8db-93b8-44f8-b009-013b304ce6dd", "comment": "Malware payload (RedLineStealer)", "value": "04e3d4de057cff319c71a23cc5db98e2b23281d0407e9623c39e6f0ff107f82a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124827, "uuid": "47d771c2-86a6-4d70-aab7-814267761d30", "value": "T120652365B8C4C432C62325350AF1DFB85A3EB5B40E759A8FA3A40F7E4F21581F325A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124827, "uuid": "18762c24-896f-4104-a20d-e7fb426f7935", "value": "fec98778e46bf1d6aed3f9ad74a5bb8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124827, "uuid": "459533ea-b91e-42de-9097-8a6ba8e60414", "value": "24576:hBeWukxPAQ0GKiSnXgUJ6MQejA1+O2XXkKG0H0l86yWstD8:hBeWukxYQ0GqnX9dQejC2kK1U2NtD8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717124827, "uuid": "afc291eb-df5e-4f47-8dda-e13590edd8a6", "value": 1478144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124827, "uuid": "df3049a4-60c8-46d0-a2e5-321aaf55e00c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443920dd-1efd-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717125859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125859, "uuid": "d8a75b9d-e67c-4a1f-ae4c-32b0d38a8c1d", "comment": "Malware payload (Stealc)", "value": "78cfdd264f8fc10e1c6a877af5b38c67", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125859, "uuid": "a011600d-5d28-4955-985b-5b776f74b28e", "comment": "Malware payload (Stealc)", "value": "9840a476600b4db3f7dc712d7fe56be0db7482ce2dc8b1e8d23bb50b1849899b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125859, "uuid": "25c4449e-e9d8-43d2-afeb-311c58e758b1", "value": "T1C8A5CF2FB1A38836D1F21A3D9C6B5764452EBA133D38FD463BF41A485A3714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125859, "uuid": "cc7e3524-6044-4d97-91a3-b4665a86179f", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125859, "uuid": "8a0fa94e-22d3-40ea-bce9-51857eb57a26", "value": "49152:eqtdPVosJEsz/+VHA58ljrIY+96lJS9bZ:e6d9fJFc7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717125859, "uuid": "3e7f36b9-573f-41a3-8fb2-fd281a16c9ad", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125859, "uuid": "21659e9c-ff6f-4539-8ca2-86e6a38721fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17783d95-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717126643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126643, "uuid": "59340e1b-50d4-4f1d-8ff2-00fb786ef1e2", "comment": "Malware payload (Amadey)", "value": "09cb06659aa498c41a89bfa931d5d5f4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126643, "uuid": "542503c5-1b91-404e-a278-74f00df739b7", "comment": "Malware payload (Amadey)", "value": "54e5b10a37b7786279eb48b38fc1bca3469647ad56c3f81ca22ba59b51ba9642", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126643, "uuid": "fd3a0976-58f1-4eb1-b31c-5dad971828ca", "value": "T14A85336B4A13F0AFEE6C5370876E7A8C4B658774B0257D6CDF6E437C05033A2985B4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126643, "uuid": "e950b8c9-27ed-4e83-a8e7-b86e566fcdb8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126643, "uuid": "fc9cef8e-0605-482c-a1c7-41bc9bac20c1", "value": "24576:A1QQkDMKpyyrirgwfNhljGmYCewGbYdalDY/3brRPOMt/gpi2JT8sR0MTLfLfK:YQQ/Lrr7fZC1CewGbYdr3b97858w0MT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717126643, "uuid": "30a2f6d2-abaf-4061-9901-3c35d7b1f723", "value": 1863680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126643, "uuid": "76ffb2a2-7683-4f19-b197-216aba06dd5b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fb2fd82-1f01-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717127623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127623, "uuid": "a34f390f-0429-466e-9394-7afb4f15fc48", "comment": "Malware payload", "value": "182403d18626a2083484967551fc6bfd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127623, "uuid": "7a63d294-bedb-405f-b326-7570c07c4272", "comment": "Malware payload", "value": "6cb94f8029ec8380d86ff0e4879235d8fa2e46425029fbb12d2d92e11156ab27", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127623, "uuid": "d65dacbc-d421-456d-9f70-8410fe4c9ca7", "value": "T1D3B5331A6539A31AC2461CBC64C602C1D3545B752806E6FFE1AF319DD2C6BBB3889F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127623, "uuid": "0becdefc-eb45-41b0-8880-a6084e5b6329", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127623, "uuid": "cbf4b29e-3757-43e4-9ddc-beb0efa4e432", "value": "49152:pdJobDvmg0SVMcAnWK8h9XfkO9Qaw39stHv8KLPq65S40Hn:LJeD+BDRmjXAmHvZqj4mn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717127623, "uuid": "a7a3e9ae-a0cd-44c4-ba4d-cf8b1b86853b", "value": 2445312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127623, "uuid": "44236e91-4727-4e60-87fc-b5f1c7446c1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bf22c88-1f01-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717127697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127697, "uuid": "a06bcd45-f9d4-4046-a5c2-e1267d1ec270", "comment": "Malware payload (Socks5Systemz)", "value": "834a7f8ea3a786f4888c64e76e1cd601", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127697, "uuid": "225c4d0b-d95d-4d30-b519-e63d39930917", "comment": "Malware payload (Socks5Systemz)", "value": "8dc784c1c46afbf731510fa8a170da5a2ffe226d3785a68de48fc0b87177e6bd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127697, "uuid": "225b4186-c169-447a-9fb4-b5806369df8c", "value": "T15846330393A14A39F1D2CD760ED95929B2A718E110AC7766824ED87F3DC62F7D40E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127697, "uuid": "fda7f124-7e82-4165-928b-7147a10614d6", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127697, "uuid": "f92dfdec-8cff-4c40-84e1-28f874c7622b", "value": "98304:mOLLt3h+ihHYCRMyDRcmjHUhajVfqv84qcoEpKQWfQy02GlBawQNDaAnmY6g7JXR:ltACbqMUYRS2UWn0pld4jLJIk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717127697, "uuid": "67c3eddb-ece2-4252-b569-630740cf8fc1", "value": 5390556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127697, "uuid": "4a29cd4f-5d63-49f3-bfc3-d79cec302b53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da8737df-1f01-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717127829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127829, "uuid": "b1f5f6ef-2f84-462a-bc67-cefa649222d3", "comment": "Malware payload (Amadey)", "value": "4335e0c5ef6fa4617f92b351fabe3984", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127829, "uuid": "eb38f55d-0523-4d22-a5fa-b27e09475cc9", "comment": "Malware payload (Amadey)", "value": "4982ff9ecd135268c73e18c18409ae200392bfb01e122277e2e60cefe074ff1b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127829, "uuid": "7984ce26-68e9-4209-9e04-2156618a4e03", "value": "T1D4953376A77A268EE48C05F94BB7A10B7D59B733A1E7016E7780484C2E7BB81B7173", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127829, "uuid": "3c125020-0735-4602-b26b-0c12a603b272", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127829, "uuid": "ec3da87a-abd1-4766-837e-096f88d2b269", "value": "49152:4kue7rqx0vfj3yCnTuM0TjlAaj5ScOCc91Ggx:4i7r60zDIlPVSPCx4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717127829, "uuid": "971a2fbb-bdb8-4ea4-9a35-86aa7a6c0e90", "value": 1903616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127829, "uuid": "f40da7ca-b836-47fe-a366-5d4b8f1bec53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "193c3cf5-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717127934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127934, "uuid": "bb05c97c-d16a-49fe-bc7a-08f5c66f3d63", "comment": "Malware payload", "value": "8cf43ef400914e513abb6ee187bb48d9", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127934, "uuid": "fdd2e6a8-57b0-4c2f-9d57-31334d7f2a25", "comment": "Malware payload", "value": "539049a4be5686ac7126044b54f832e5b302f74fb5e2262e4071a82ff1268f72", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127934, "uuid": "9b57df2a-04d4-4005-80f1-845733934125", "value": "T1A826F043EF89DA97E8BA83F0AB370CA92E071F44C652AADB1511767D2D771C10DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127934, "uuid": "2207b403-73d5-425e-b8f4-3bafb7bcf06d", "value": "98304:jyxVsYuzfNTMgCMVzBvI4JymzZzBnTM0tF4hcVDg7jjg53kX:jyUjzln/VzdJ9zXfShDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717127934, "uuid": "a606d61d-38a4-4a33-b1f2-9a63a515e52e", "value": 4583778, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127934, "uuid": "140e16e6-1c45-417e-88e2-cb142a40c642", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffee05a4-10f3-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128126, "uuid": "236f1659-aeac-4ba0-850d-50487f976144", "comment": "Malware payload", "value": "98e71cfb4431c1d9ccc7ceaa022e2bc5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128126, "uuid": "cf5be4a9-d47b-461c-9af6-98fc7c91ee38", "comment": "Malware payload", "value": "e0b2d95a4ce45262e40bc3ed785df718eedf9c4ffa049550fac080726d97ebbe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "84524304-d626-4de1-85a9-5923febaa51a", "value": "T1B5732A4798629EF7C005AEB52DBB4E74071BB9511B0F0A656A2C9BB0034F5CEF48F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "0f7c4e27-514a-4fd6-85c8-0e9e61a574f8", "value": "1536:1KoXXyumUO5vdy1uspU+5JRXqH2WBxL/2YYmX4:0kXynUOdc1usV2j2j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128126, "uuid": "f58365b1-966d-4417-83df-2df1e9fd3dd9", "value": 78298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "f8968298-529d-4a59-9771-139b0861840f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "46462db0-4d59-4a20-a47e-05e17877bcb9", "value": "t1f911dd25693a16396e619c248c9c53b210382723b3491fb5af3ac4cc91254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bbcee26-10f3-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128126, "uuid": "8122ae81-b11b-43ed-931d-7a3995f61a69", "comment": "Malware payload", "value": "2fa55b5497264e709da4cf356ed251a8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128126, "uuid": "5c31fbda-a0bf-45ab-a6bb-05d44531b05e", "comment": "Malware payload", "value": "441295752299b0856299698874e39da66f5a825191bd6eac4b23d94e4c221fbb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "4bb96a50-a30a-4123-bb3f-3d455ce9e37a", "value": "T1D8931A05E510976BC2D237BEFB9E425E33372B98A7DB33265A345AB42FC17990D391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "8cbe23e3-f6c9-4168-8ebc-cab7cda83151", "value": "1536:bKfnqp/nskN3uWR+6kdCinzSKDg0/XMcGI8iHJpYyyUicX1jSLtLYpOFrrT9Z6ZK:Xp/78j6ZOzSs1nJpYy1iXVcxa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128126, "uuid": "1e523cc5-1518-435e-a170-0f26b070d3b7", "value": 90039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "c3e00e30-3358-4156-9b8e-1e3a44ca15b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128126, "uuid": "8db62530-78f1-4748-bfd6-9c129885893f", "value": "t1f411d025593a16396f619c248cac53b211382b13b7455fb59f3ac4cc51254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "712ff7dc-10f4-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "95a55cdc-3d29-4ab5-8dbe-2b69d3424e63", "comment": "Malware payload", "value": "c0ad72c0b2513be1267426b1d91bea48", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "c8faf6ba-a1ba-45b3-aaf6-b9c0f4c5523d", "comment": "Malware payload", "value": "0d2b8de6c42d023023b6d1cca4fb8aa76eca8cf00f60cad1e3052faff6847411", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "ae672464-c7c7-481c-8b11-34af92ba324a", "value": "T1CB931A05E510976BC2D237BEFB9E425E33372B98A7DB33265A345AB42FC17990D391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "eaebe322-c239-422d-b122-6ee8d8b5168d", "value": "1536:bKfnqp/nskN3uWR+6kdCinzSKDg0/XMcGI8iHJpYyyUidX1jSLtLYpOFrrT9Z6ZN:Xp/78j6ZOzSs1nJpYy1iAVxxa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128127, "uuid": "a2ee759c-73ac-4316-87ab-97138896ea71", "value": 90039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "66436e18-a5b9-4a39-91e8-fd308c475fe3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "47c2448d-9311-422e-8314-9277b1b1065a", "value": "t1f411d025593a16396f619c248cac53b211382b13b7455fb59f3ac4cc51254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cbe1d2d-10f6-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "14ec2050-f951-4d64-b96e-3eed42cd86d5", "comment": "Malware payload", "value": "23ee5a8b998de681eb94885abdb35dd6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "e39be0de-914c-475b-965a-4b943a012895", "comment": "Malware payload", "value": "c0ae1eb249705f61d45ca747c91c02a411557a28792f4064c1d647abb580bc10", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "410bb0b8-9a8f-4ab1-af32-b9ac641d3ca0", "value": "T166833917DA96843FC0AA53B51FEFD3229523B4BD173251236385BE386F224C89D693", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "48eedb0d-ec39-4b5e-a997-6953f1eab2bb", "value": "1536:WinNLc8aos4+7bPEjpO7CxW2XJMeAvNebSIYLwyV8Q0HOn:dNSoscjpO7DMAFnbMDQ0Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128127, "uuid": "df4c12b7-be60-4a61-8d85-b9e68b4efc71", "value": 81866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "0d039a42-903e-4257-baeb-a0dc85c1cae1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "f1c29974-99ae-436e-9ec0-7296f2bb2748", "value": "t1f5110d21683a06396e619c248c9c53b2103c2723b3490fb1af3ac4cc91240f3e97fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "528b3486-10f5-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "dab962f7-ecd1-4c40-8c13-80a47e8ffed2", "comment": "Malware payload", "value": "8965e2ccdeaf1b07c759826f8be9beea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "118451f5-4231-4410-87a3-db9bf29abfa9", "comment": "Malware payload", "value": "9895eb8e672fb87cad8fe268843fdf3e5a7d67732e2f5cd405396c9fe5fde941", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "5ebf5a13-3871-4f17-9e5e-6535eb3da268", "value": "T1FFB3852BAB719EB7DC4ECD3309A98501508CE64A12D96B6FF6A8C61CF34BD4E49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "7cf28be5-3436-4093-bf5d-6015af9a1c10", "value": "1536:4wvMT/yejGSHzf9dP5VDI7VMhcBehzxPTrP+v+tKlXywppgfDvwL5QJaWAV:4wvSHzf9dP5VDI7VMhcBeLPHwLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128127, "uuid": "fd8ff1d6-706e-47e4-a601-628e59e16a49", "value": 111165, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "6a893716-7ece-4dac-b847-64a5941098c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "204746b5-0806-43bd-be18-a92d61d3b9d9", "value": "t11511dd25693a16396e619c248c9c53b210382723b7495fb5af3ac4cc91254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc3eb69e-10f3-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "0dd2a242-b362-4707-81cb-6584a0878de4", "comment": "Malware payload", "value": "b2aa1c090428f039e09317bfb10c23da", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "797aed79-c602-4601-bc7b-1033daaea943", "comment": "Malware payload", "value": "484c8ffc43d5cdaf279374fa07c4146ca2fa0d0ffa8c32b7d5c562f85888b552", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "9f327ce3-10bb-411e-a6da-ee77cc77de95", "value": "T19C931A7B23631E63C4D9513141F34373B6BAE74538788B53A8A06E782F06AA435573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "ef30c463-8368-490c-bb4b-ba026b8f473d", "value": "1536:vnWiw5RyyuqQ4DQdG2sjQ87gcBttLo6ol8t6:vntORmG2sj9Bfa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128127, "uuid": "f63ebf0b-d9ae-4918-825d-1dc574199f85", "value": 95014, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "5b532148-a6ec-436c-ac00-b2a90686e425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "b2abaaee-9d02-4a09-8b25-89696cee317a", "value": "t16f110025683a56396e619c348c9c57b2113c2713b7450fb2af3ac4cc56254f3e97fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7737109-10f7-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "284eae7e-768e-4b09-a18f-31def49d8984", "comment": "Malware payload", "value": "71c0c67558baffe241852fb676deca9b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "62f06f0b-f07d-4c98-bbfb-416e1fab2f30", "comment": "Malware payload", "value": "f4bf61fc335db4f3e7d7d89b534bc1e6ead66a51938e119ea340fe95039935e3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "65dcabdc-b165-4057-98f7-ae6929743a61", "value": "T125B362397A61EBBEE27C82314BF66E70C395259237A18340E26DDB185F7124C1C9E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "f5ffa758-8ab5-4278-a8cb-469c1eade8be", "value": "1536:y99JmuDQTQ9J0Mv4r7of/XCsiW1kotN5ZW0fQ+LVq13dAJpEJW6CXj6AV:Y7wWe502cXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128127, "uuid": "27f288db-91ab-4222-9cf5-44ad7bc14be1", "value": 111213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "1ff0c096-5e73-4f49-8b62-c05ea24a9413", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128127, "uuid": "38cebfb7-aac9-4e49-a6e6-1b971ff9c02d", "value": "t11511dd25693a16396e619c248c9c53b210382723b7495fb5af3ac4cc91254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad1310fb-10f6-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "79fb6d3f-4e13-47c0-b2c9-d787847d45e9", "comment": "Malware payload", "value": "ab85d08578bee154e859dc25e10f9a63", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "a1a9f2ca-e521-447d-9b87-801d5f4abd3e", "comment": "Malware payload", "value": "b521d566c2c3786683ad5e4fd33317066d3f17bf3f15823409368c59d43c6f90", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "460fbaca-debe-4f00-b9a6-87a688822dbf", "value": "T199C33B08EB00475BC1E237BEEA9B424E33334B5477EB330A593856B43FC6BA94E255", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "f36e7e9e-6324-4012-bb1f-94149debf487", "value": "3072:7ZT8fD5rn6RXIyW9M8QFGWxbAkSM/97e7y:pyD5r6JIyW9MxFBbAVM/9Uy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128128, "uuid": "7963bf4a-7f1d-4e66-818e-ed2ca32d9fd5", "value": 127212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "4ea7d3c6-df22-49cf-81d5-073613273367", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "2d83603f-2abe-45a5-8acd-3692ca83de1d", "value": "t19c11dd25693a16396f619c248cac53b211382b13a7495fb59f3ac4cc91254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a9a89fd-10f3-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "2156fbd9-13c2-4215-a817-d6285f689071", "comment": "Malware payload", "value": "2d697f7d7e6d269c7e04507c81538b45", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "b5ac1e06-c2e5-4c19-ad4b-1d1229068c2d", "comment": "Malware payload", "value": "624af334ad1d629d8fb6d8cb7c942efe6b37bf29882b530349270b55ce2c3e55", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "6712e444-dc15-4802-a4c6-eae7a457a332", "value": "T158930905FA14836BC6D237BBFB9E468D37391A98A7E733221A341FB42FC56985D391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "b8a093a9-f37f-42a1-95be-de028a562d00", "value": "1536:3hrmjizwgmj78I7PfewQ+86n7RHZ5pDoFZwRcJmePRzsHgFwuJwYUuBhEBj8gNnx:3hrlmbfex+867R5fsFZwcmfgFI85K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128128, "uuid": "bb80fdfe-4372-4c5b-aafb-7d8d85c8c0c0", "value": 89996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "6be18707-50ed-411c-8cbc-2b7757fa6991", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128128, "uuid": "09c081b5-e1b1-4577-baa3-e06881feddc5", "value": "t11511dd25693a16396e619c248c9c53b210382723b7495fb5af3ac4cc91254f3e57fe", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25b3e94c-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128384, "uuid": "2e846d02-b7f5-47c9-843f-62f8706636c5", "comment": "Malware payload", "value": "4b1e6d1a04b9dd4b1d0b0b61304446f1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128384, "uuid": "9428a20f-6ce8-4b8e-8a79-c875fbd14861", "comment": "Malware payload", "value": "1f4a0d7110f1083c98049f3827324d3bb3cf9476daf1bb2c53550d5e4c89fae7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128384, "uuid": "9b28bacb-51fa-431e-be8d-701eda9ec037", "value": "T111159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128384, "uuid": "12c83c47-35ee-486f-99d7-b590f8bcfb2c", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128384, "uuid": "237b3316-b7c3-437b-a557-705b4bc526fb", "value": "12288:3qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TB:3qDEvCTbMWu7rQYlBQcBiT6rprG8aAB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128384, "uuid": "0eacc4f6-95a7-4af1-9bad-c9052e565825", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128384, "uuid": "b1153fe4-696c-40cf-94f5-74728c51a9f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abe1de55-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717128610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128610, "uuid": "81cd9950-6ba6-4570-83d7-92e2add74405", "comment": "Malware payload (RiseProStealer)", "value": "48572a0c8dde3a155a5e3256c540e636", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128610, "uuid": "5994b72f-ce68-43b5-8fe2-d3d192c8841a", "comment": "Malware payload (RiseProStealer)", "value": "209e65efa018c72969d29161976c002527d5bee7613a772a7c8add5b89c7fa7b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128610, "uuid": "ecd26ec5-1c93-42a3-a110-fc38db46825d", "value": "T1AFB533A2643CA573CBA91A7702D0F718B94CF62E9F951736F18F74BC0861F02B3958", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128610, "uuid": "3f7a0800-9511-4720-b4b6-a63cf21269b7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128610, "uuid": "b7a8f5ac-3164-4c97-8ed2-d0a887316174", "value": "49152:BkmKhyq24kI3qebVaBjoSEEbp/EmH+hDaqorzaelfSehX3Kj:BkmKEqlkAbkdoSdSmehdorzPX3A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128610, "uuid": "ff39553a-4a88-4c40-bbdc-b591ded7de7e", "value": 2360832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128610, "uuid": "88750d3e-9baf-4e32-9029-bd44c52c1db0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e24d48fa-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717128701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128701, "uuid": "2c496870-7478-421e-9fbb-2d66fe12a162", "comment": "Malware payload", "value": "dfbd4b26944cf068d7b49e9a59989e30", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128701, "uuid": "0e959ce0-8087-4c49-ab64-862e0573997a", "comment": "Malware payload", "value": "7678308b339b5e6659bccd064170cfd00f00335f4a9d10ef8307d1d9a517b801", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128701, "uuid": "27baab9b-5727-41dc-ae0d-07cae1947b47", "value": "T1B745BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128701, "uuid": "47b968e9-9354-4435-930b-453ec5f3f7a8", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128701, "uuid": "696e926b-f28d-49dd-879e-1fe71ba0281c", "value": "24576:8qDEvCTbMWu7rQYlBQcBiT6rprG8auU2+b+HdiJUX:8TvC/MTQYxsWR7auU2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128701, "uuid": "12d12372-7f2f-4795-afe9-61b94ce6ef77", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128701, "uuid": "0a96871c-40a3-44a1-9bc2-89edbe9ef101", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717128890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128890, "uuid": "7b7defc5-200a-444a-a6b2-be3c47557707", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128890, "uuid": "0b4e1a0b-4a4f-4bd6-b52c-acdba814df95", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128890, "uuid": "8169f6a2-2f14-4c43-ad9c-95312dacc6b6", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128890, "uuid": "e3341122-e18c-4467-9b62-0e54b4f780ee", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717128890, "uuid": "c2be2e8f-a105-4f2f-9e3e-6fda2f646a0b", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184f6ada-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717129103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129103, "uuid": "247a2fdd-f304-4b60-8f30-1564a72a87b9", "comment": "Malware payload", "value": "123dfe79846e600a8336cd14fe647d5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129103, "uuid": "f535ff1e-53dc-445d-b20c-227ffd7661e4", "comment": "Malware payload", "value": "e967cff2e9a75e8f80fb4938ede971f9accee357cf9a761e9b34cdf5e9285e81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717129103, "uuid": "0691614f-4edb-49cc-abed-86e6c08cb486", "value": "9A73121613AD296152714AF1E7FE7F88E50D2A688FF1AC247C227C68ED333AE1CD4519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717129103, "uuid": "f83729bc-b402-4bb1-b360-7700f937ee56", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J5:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717129103, "uuid": "98f47475-79d7-4cf6-b8d3-2cd5b2aeeda5", "value": 75296, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5242aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717129780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129780, "uuid": "67fe6e8b-9911-4124-b94c-24cbb5054ceb", "comment": "Malware payload", "value": "70e3f6b8302027cfd1a757e02252400a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129780, "uuid": "be200b08-8741-4aeb-8d1a-60e0986dea66", "comment": "Malware payload", "value": "edd1e9268ff4961c7d0d2364d7215925d38852fa8646636d8edb3e97900e53ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717129780, "uuid": "34a58ce7-498a-4324-9d35-788dce27541d", "value": "4C731229139924A5D63141F1E3FE1B88BE591FA9CEE1EC14BC117C98ED333AD2CD6518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717129780, "uuid": "2e6b77e2-a7bd-4a0f-9d5b-92a2c5e97097", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1d:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717129780, "uuid": "b513a882-3171-44fa-ae4d-de7001b53d28", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0ef3775-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717130417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130417, "uuid": "60018a51-aafa-4163-8531-b2ffb7bd67e9", "comment": "Malware payload (Stealc)", "value": "63534afc076358dcd1a49997e1a19dff", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130417, "uuid": "5d4925fa-6c63-48a9-ab18-07aff79a49e3", "comment": "Malware payload (Stealc)", "value": "779dec9c695646a44c98862d9dbfee9510ed20514e0ff7118e7304768bb66dc3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130417, "uuid": "2e34321d-48cb-47f2-8c63-5bc2feaaf169", "value": "T1BBA5CF2FB1A38836D1F21A3D9C6B5764452EBA133D38FD463BF41A485A3714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130417, "uuid": "e21addfa-acb2-46da-8e45-90d2aafa24c7", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130417, "uuid": "03d65456-6775-451c-b501-a49fd7829f80", "value": "49152:eqtdPVosJEcz/+VHA58ljrIY+96lJS9bZ:e6d9fJ9c7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717130417, "uuid": "1f23abb8-040a-43c7-83fd-1f777a8680f4", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130417, "uuid": "35908833-cf9d-4602-80b2-42a768f3318f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6029c1ac-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717131060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131060, "uuid": "da8ac958-c4f8-4f25-81f6-de639401ce66", "comment": "Malware payload (GCleaner)", "value": "747395a7777c19c8b665ec6bb586ff3a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131060, "uuid": "41b902fe-b008-4da3-afff-7a313bf8f535", "comment": "Malware payload (GCleaner)", "value": "6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131060, "uuid": "f71bbdaa-ebd1-445a-baef-951c444c3c2f", "value": "T12664AE4393F1BD24D9668B769E2FCBE8371FFA714E44776612087A2F19711A1C9233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131060, "uuid": "0b213867-01cd-4ff2-ac46-ba7526bac01d", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131060, "uuid": "dae05ea7-1412-4c0d-885c-dd6d782bfc6c", "value": "3072:UjG7OjhVQ/OISTdP8Ztd5rG3eVATxyFPBuflzqhLkgbe+3mILcqJs5rdKGdKth:UEOjcVMR8Ztdlw+PB08zbTWInQK6Kth", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131060, "uuid": "69ac04fd-2a15-4e49-a78f-3ddeec368b67", "value": 314880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131060, "uuid": "481723b3-3c83-4bb6-ae38-eff94821a6aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5677359-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717131203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131203, "uuid": "815e84e2-ddb5-4716-b4fb-753a86b9d7f1", "comment": "Malware payload (GCleaner)", "value": "f54e06c1925fd4b7ecd0f482269c0320", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131203, "uuid": "a89ed425-10d5-4bf4-bc44-0b81b96df529", "comment": "Malware payload (GCleaner)", "value": "42e2ac5bc7f8e2ce1a0021862a51cf4ac114bfd80145e617a6f7b96dbb564045", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131203, "uuid": "a3f2762d-4fdb-4439-a7aa-131f6a39c34f", "value": "T1EF547D53A6E1FC44E6268B728E2ECAEC773EF5F04E4B676A210C6A5F14711B1C1237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131203, "uuid": "5e770376-09e7-4320-80b0-378407625d6e", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131203, "uuid": "02850b53-324d-4c83-a1da-74032a16f96a", "value": "3072:gIVHIcfasrcnH4hSBIIZ5JE4qePaNd4fF5PrOy5zJgh:gIdBfNK4GhqePaj4tNC/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131203, "uuid": "ed08366e-d49a-4376-9467-7d896c44c97f", "value": 281088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131203, "uuid": "8b46431b-6c7d-41da-bde1-90708b9cf6f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb5ebe45-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717131239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131239, "uuid": "f8d5cfd0-e8c4-4c38-97b4-65b4207e93a0", "comment": "Malware payload (Amadey)", "value": "55c66a094425babc81260abc1e8b69b6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131239, "uuid": "1862ae95-49fd-4282-adf2-a917450f7003", "comment": "Malware payload (Amadey)", "value": "8710fda7d6d74854a7e76ae97a65683bb492831c2874f7cb171a70b8b874acc2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131239, "uuid": "77cfa459-c556-4c83-acb5-8485dffce821", "value": "T16A95339EA54BFE07E2599931CE67478D03ECD93DA17B6832A1152D23E55302EA340F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131239, "uuid": "8605b453-c911-4c28-890a-e37afbc903aa", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131239, "uuid": "208f138f-c2dc-4a45-a4bd-c9dd43d748c9", "value": "49152:k0hJyywofjsXgZHjcCUNzAhv7kBFkjZX:k0hB1fjWuwCv1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131239, "uuid": "192415dc-8777-457c-a901-b45e2af5375f", "value": 1899520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131239, "uuid": "9280b862-8f5d-462e-8735-7e20d57532ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f502b987-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1717131309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131309, "uuid": "87800561-baea-4e13-a700-25a62fcd4cb1", "comment": "Malware payload (MarsStealer)", "value": "672422e295986f3ab956f601bd384733", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131309, "uuid": "dc4ebaa3-3356-42d0-bf16-ad2bf7f04974", "comment": "Malware payload (MarsStealer)", "value": "104d6d59fc2dbc553aeadea6d99c20d49e369a2334aa0947f9e7115136d2642f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131309, "uuid": "b7d16d8b-761f-4988-a74f-c48f2a09934b", "value": "T16C447D03A6E1FD54F9678A729F2ECAE8762EF8B04F452766E1389E1F0470161C2E37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131309, "uuid": "4ba65411-d3f0-4158-898c-e3513252d17d", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131309, "uuid": "2dabb3c5-86eb-4d66-92e1-d0cc257e2b99", "value": "6144:yGEi9dMIW3V3xlPnRhOK3hIBEJFOsEJFOjh:yli83xZRh3Yg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131309, "uuid": "82d5c835-9b20-4aa9-bec1-cc77030d2c43", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131309, "uuid": "a6deeb86-b4cb-4a0b-b68a-4403283c6738", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ccc53b2-1f0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717131510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131510, "uuid": "bd762539-55c0-4d67-8cf5-cd3303c4ed0b", "comment": "Malware payload (Socks5Systemz)", "value": "3ecd4bbb29a76a77c0d360c9576a61ae", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131510, "uuid": "ba94bddb-4173-4e99-bf34-bd9857ff92de", "comment": "Malware payload (Socks5Systemz)", "value": "b6ec1019e76dca4edb778693b271a80c38d864ffd2c03b08ab5306a204b38340", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131510, "uuid": "a53b7ef2-72a8-417a-a2a9-1f9754fbb33e", "value": "T1CB4633337FD44EBEC100EC78F95BE2051E3BD8962CBA5C1D5A48CB120EA2994978B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131510, "uuid": "f2455cac-cdf0-49b9-9e25-07fa3adfb998", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131510, "uuid": "6fc41a47-fc72-4660-980d-b238a7a2abc8", "value": "98304:mqiVWrUNbJ1DADi9QoF9v9C2e6MVMk2K8Km9fDAvMfQd3t:S1JtAaQge6fkl8Km97AvMf2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131510, "uuid": "5612e5be-7506-4d25-997b-f64ae9ac20e9", "value": 5571006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131510, "uuid": "3f491efc-41bf-4af0-8306-f52cb7e3dd8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6d83ca8-1ce3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717131632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131632, "uuid": "7984eb86-8eb1-4fcb-80db-d64093fdf9a9", "comment": "Malware payload", "value": "29459f059235825f2f70eef8811a249f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false }, { "name": "rekoobe", "colour": "#a96df8", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131632, "uuid": "b8ee7168-0c09-40f2-ab62-959b13d058c5", "comment": "Malware payload", "value": "5dac572374cb40561ea5dbc0dfc963d863f08862a0bd33fdac6ac8d0aa180ada", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false }, { "name": "rekoobe", "colour": "#a96df8", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131632, "uuid": "5e97b6e2-adec-43f8-bfba-c274ee019d8c", "value": "T15F839E43B6668DBFC845C6304F4FA02AA933BD14EF66321B35401B643D2FB1A6F297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131632, "uuid": "9d00b362-d6cb-4d08-9edf-78e308a68329", "value": "1536:QahOrhUNuV9NnkqnhhWMC8tOadBvwZoXRUqHekyN/1H5xuM8b/3d:Q5JxkqnhhWMhtOqcoXRUq+xN/1Zx2r3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131632, "uuid": "c1b4e009-b6ab-4d6d-94f2-37b58e129bcf", "value": 86208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131632, "uuid": "fefac187-b23c-4864-87ec-248940018839", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131632, "uuid": "20e63b07-6a6f-4eb1-ad9a-73eb12b8bef8", "value": "t1a4017687d93e47988ad65d24dcac53e38183d62a90669b04ff29ccc048ae44af218c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "843cb1a4-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717131979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131979, "uuid": "4afc3919-c331-4f5e-bfee-775b2a51f35c", "comment": "Malware payload", "value": "0c91573b2b8e5e438e3943cfe8d4529b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131979, "uuid": "19572f88-206c-48b7-bfee-ffc6935ee377", "comment": "Malware payload", "value": "ba8bb2f27c79329b0d751931a14284b9fbcac45cf0b06fd0b3a188b0c846b80c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131979, "uuid": "cce933aa-9069-4b6f-ab36-cb3ba10b4309", "value": "T1B8159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131979, "uuid": "db0ec5c1-2733-494e-b328-900106c4f496", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131979, "uuid": "b23a1ae2-6be3-418d-9c5c-0d2edeaad440", "value": "12288:HqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T3:HqDEvCTbMWu7rQYlBQcBiT6rprG8aA3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717131979, "uuid": "15a0e5dc-bbb6-46fa-b2ce-0c8943dadd53", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131979, "uuid": "02efbc8c-bcab-4dcc-8732-ef3d195431bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac214caf-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717132046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132046, "uuid": "0ca7fd1f-9663-43d5-b76f-470d7fb30d24", "comment": "Malware payload (RiseProStealer)", "value": "5bf5441f0451afc12196db11237fdabe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132046, "uuid": "5beb402e-f12f-4a95-9057-d90df95c8c4c", "comment": "Malware payload (RiseProStealer)", "value": "82a99503d2e3ce1d80e192dee8a50510b52e190fc594cadf932b5171eb74b8a8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132046, "uuid": "176e7d4a-64b5-4c60-96d4-cb64f62f810d", "value": "T188B53383BF545E30C1BE7A76A99773653E9038124285C9337B811A148A713BE7FF27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132046, "uuid": "f0d6b04a-1053-4da8-b9aa-b355405fe230", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132046, "uuid": "8480dce0-e645-4902-b6d5-41a732704df8", "value": "49152:UkmKhyq24kI3qebVa7AYi3Ppj4fGxR/bnP1VeP1ol9NBvkS:UkmKEqlkAbk9yPhXznP1U1C/BN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717132046, "uuid": "23854717-50b9-469b-94b4-db5a0aafda6c", "value": 2377216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132046, "uuid": "bf6eabc2-caf1-466b-a7bb-fe3321166624", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c828bf77-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717132093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132093, "uuid": "c84cccfc-2dd9-473b-afba-29a67efbddb9", "comment": "Malware payload", "value": "47fe824560da8b45042541112eb3a70c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132093, "uuid": "a8f47076-4bf8-4414-8d78-8a7ffed10f9b", "comment": "Malware payload", "value": "67d864deb81b384bb81e3af736b0c36986018b7523e9c750103c92cc0887e549", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132093, "uuid": "671cecf7-48d6-4cb0-b8d2-cfccfb183cbd", "value": "T161B31250CFAA1D79FEBC887F2214C461A659C74B3780FA46929F120681F2D54E7CB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132093, "uuid": "4d74063c-af59-46f3-a4c3-f18ad7e2a802", "value": "3072:x6w+L3/u4OGy3Bpnqqq5fljdolXoBXTHX5R:x68oipnnK9jqXEXz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717132093, "uuid": "21327b2a-c6c7-4f58-b092-0f0f43736d66", "value": 109405, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132093, "uuid": "5eb0503a-0ac7-40c0-b256-4720d91894bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef8868e0-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717132159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132159, "uuid": "bd564585-92ec-4056-82f6-ecc9269998ef", "comment": "Malware payload (RiseProStealer)", "value": "ebc16a7e0daafe552f108f405bd69026", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132159, "uuid": "ae299e22-0061-4174-9e35-359467d19a11", "comment": "Malware payload (RiseProStealer)", "value": "53da52ae0039ba4dfa7a5e61f2f3e6fe3277fc502bc22292e3eef8fa13a431aa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132159, "uuid": "e951618b-0c26-4ec4-a07e-137d0c432218", "value": "T1ACB533DEA22DBE1CEE243F735B2EE03A622E105F6E5289D67D4A1B100F47513E4162", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132159, "uuid": "085336b0-0470-4c35-b01b-913f3aa33ec2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132159, "uuid": "06012a33-999b-438e-8495-84b787523026", "value": "49152:gM32VNjPTS/GSGB4VDh3Zn21IOoYocsQMPR2UACGC1QfPAMc:gMkj5S4UPn21gVzACG7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717132159, "uuid": "198cbee3-9530-4bda-8300-7f595796470a", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132159, "uuid": "a400a873-3c56-4812-b2c8-2d018e44d04f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a2029ae-1f0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717132311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132311, "uuid": "a23a0136-7499-4bf5-af3e-89c69f817263", "comment": "Malware payload (Amadey)", "value": "238e6212561325caf21594988d686271", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132311, "uuid": "473d1547-a14f-43d1-8d15-9a4bae8cc45f", "comment": "Malware payload (Amadey)", "value": "861ea16c509308f3d4eaff3a6db620b48c6a0575626002ec287a5b356781e423", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132311, "uuid": "b84079ec-c215-49eb-93dd-ab41e610dc43", "value": "T1E09533807458FE2CCCE9A6F28FB953574FE85FAC18D4903A0AD9C2366452920FA7B1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132311, "uuid": "2de5b56a-195c-488e-8c52-c6b752ce6f7c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132311, "uuid": "7ec8c11b-a1d3-42de-bc23-e96990e05128", "value": "49152:j1Rtt4a/43HkaPkPqzVaW2uyreNYtKLZZP2O8:9tt/0hBzZyoPX2O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717132311, "uuid": "e813cf48-d453-46f1-acd9-655df7bb648f", "value": 1936384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132311, "uuid": "0bf550e4-21c5-4ae1-9424-943d13885fee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95a54f8a-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1717132867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132867, "uuid": "b0900b09-aca6-4a31-b2eb-0857a7bf2c4b", "comment": "Malware payload (RedLineStealer)", "value": "01cff6fb725465d86284505028b42cfd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132867, "uuid": "45e5f140-a350-4c6b-8115-0d9b8857750e", "comment": "Malware payload (RedLineStealer)", "value": "3814ef98c5c16988df008a989038faf39943b32fb9687dc9347ac16df722e4cd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132867, "uuid": "560a8489-dbf9-41d3-ae39-3a96331fce69", "value": "T1D464D04174C08031D97315364EF5DAB89F3DFC604BA66EEB67840B6E8F205D1FA346", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132867, "uuid": "48b9a435-286f-4152-83dc-3e7859ef78e2", "value": "b17d49828275c0ff5fc68aae18e3f1a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132867, "uuid": "9d644b7a-b5f3-4484-9e5a-893564414d87", "value": "6144:dKiOduIntTEob6Cehx1m0kDLnbdyvtz+YrAYhsQa75/QXoe+Q7kh:dK9fntoNwLb0vtz+tYhta7KDzkh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717132867, "uuid": "66057c3a-c946-46e1-aa19-1f0d0e774242", "value": 319488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132867, "uuid": "8344b9f0-4851-43ad-a053-6884e9fa9b10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d1545f-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717133020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133020, "uuid": "7faf7f08-d8de-4c2d-94cb-6ff6758ba7e8", "comment": "Malware payload", "value": "cd7cbefa4bc6fa3893c9afd5d04f2458", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133020, "uuid": "7e0ac8fd-d26c-4490-9baa-aaf504e13d74", "comment": "Malware payload", "value": "47f458377e317d3991b3292d9bda5ee17692d51edf6f7e33ef5fff3153e7386a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133020, "uuid": "7336a49d-b4f1-4969-8b9a-65d9a24cb871", "value": "T13845BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133020, "uuid": "af22d7a4-92af-46c9-a157-6dc7c3e754a7", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133020, "uuid": "9566d827-ffec-4822-80e8-cd3175d0f04c", "value": "24576:FqDEvCTbMWu7rQYlBQcBiT6rprG8auz2+b+HdiJUX:FTvC/MTQYxsWR7auz2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717133020, "uuid": "6b5093f8-a429-448a-8866-2cbeff9927d7", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133020, "uuid": "1af2225b-75b3-443a-9e83-685cc67c01f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70b2f432-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717133258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133258, "uuid": "ff60a0d7-faea-425b-96d9-67c8fba4686f", "comment": "Malware payload (Stealc)", "value": "ebe2a17e466fa726f35429aa5427b987", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133258, "uuid": "ee587b4d-8c35-4443-b207-30821c39374d", "comment": "Malware payload (Stealc)", "value": "29f8ced0856da359247519c6f9fadf9a5052064a893cdfa974ca65073aa0e3af", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133258, "uuid": "6b8116f9-666c-46a4-9ed7-4fc6d1e9634d", "value": "T1D4A5CF2FB1A34836E1F2163D9C6B5774452EBA133D38FD463AF41A485A3714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133258, "uuid": "5a2c95fd-cc0e-4c0a-a317-392af4e9fe52", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133258, "uuid": "8a0ab50f-2675-4735-b49d-2a29227f7cb6", "value": "49152:eqtdPVosJEwz/+VHA58ljrIY+96lJS9bZ:e6d9fJZc7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717133258, "uuid": "47cffa4e-7b36-4d7c-ae9c-1d42646ce7ad", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133258, "uuid": "f06a251e-eceb-4736-af4b-92dca1d99ad1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6eded3d-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717133863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133863, "uuid": "665f1047-9d96-4a25-9a96-e2bf1cc6ee95", "comment": "Malware payload", "value": "0dfd36f7cb647a73e5212718302c1715", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133863, "uuid": "19584db4-7bee-4a67-9ba2-5bd669db92e1", "comment": "Malware payload", "value": "a822c23fe2dc289f56a93ab67ed3885838b5a6b19db4a51e6ed2ce6922aedd53", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133863, "uuid": "89275278-b5b9-4148-bf92-d50378036f27", "value": "T15D02AFA0912142BEBC72338FB04CDE15252B87E0EA06D5D25DF4F5A41FDCA8127833", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133863, "uuid": "29b2ddf3-d173-437b-89de-104701d94e5e", "value": "192:kreLjxutEujXlxvRMoKgMKq9TNg3oI/rMMy+eq9VcnZp08cIHF:ZWl35YpZ9T24EOZiH+F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717133863, "uuid": "56faacb5-2a1e-476c-b678-33a42cfbc9c3", "value": 8960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133863, "uuid": "f5267d7f-be3a-46df-9871-c9607729e6a9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21f05fd0-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717133962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133962, "uuid": "b1372ca5-b8ff-4dd6-a3d3-abf98ad9fdbe", "comment": "Malware payload", "value": "ab9fbdee40aded38f96b522a63ef4ba0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133962, "uuid": "d494a73b-2987-4deb-86e4-d8490ffb8bee", "comment": "Malware payload", "value": "34f748244cb6bea2605c3323a7e7504fcc4206b57169f4633a77190abe254f00", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133962, "uuid": "b55fa1cb-7f0b-4f32-8d6f-4e202494eeb3", "value": "T16A74B00E57E1BC52E976CF729E2ECAE4771EB9B35E49636621186B3F00700B6C2637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133962, "uuid": "ac439811-c78c-4c80-b35a-8b80ddec5fa7", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133962, "uuid": "83891cd3-7491-4cc5-9ae6-9b31e324342e", "value": "6144:ITnQjxuuwfZjyfHcG5st53iNeOOphtbjbCh:IT6xKRCHR5st53iNpORf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717133962, "uuid": "e4c92a79-e9d5-4671-b980-5462237a40ab", "value": 352256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133962, "uuid": "730a59cd-5f27-4206-b0d9-e93ad3d732c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16b4dd62-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717134221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134221, "uuid": "a5de3641-4653-4540-b70e-9ea58d201617", "comment": "Malware payload", "value": "c8c6c32be3a48124d50575a055c715e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134221, "uuid": "e852624c-857b-477c-9fa3-b67ac0e80539", "comment": "Malware payload", "value": "e563ffa034284c3b6d30f55369aa0212fedc8a3e5e635d14cb809f6f82f82b94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134221, "uuid": "3370a3eb-54cd-465b-98f4-c23079524872", "value": "A113028332952F73D52189F4E7BCAFC6B14ABD54AFEA141BA8113A65B07136C14C981A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134221, "uuid": "ea267c36-5eca-4d40-b3a7-90c3ed3dd148", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzR:yYI0ARqw1qAEW67UIWi7M8gm9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717134221, "uuid": "ec669c52-a129-4756-8405-c220f6ca0900", "value": 41992, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717135198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135198, "uuid": "c0664c9d-1604-4c7a-a31d-7b8b46c1b2e1", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135198, "uuid": "8fd0afeb-3a4a-46d2-bd31-ff64bba13b8a", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135198, "uuid": "950a0a0f-f31e-4ae5-8c9d-5c13d1253c8f", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135198, "uuid": "d0476eb1-f133-49db-9a5b-87e6b4c7d867", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717135198, "uuid": "2ece4a8a-4fcc-42ee-b1e4-e94e375e0df7", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717135519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135519, "uuid": "1af3cb27-204e-41c4-b562-1764baadbc00", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135519, "uuid": "91921604-c244-4402-9edf-ba39c04938bd", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135519, "uuid": "e1ae99e6-3c3e-4f82-959d-4067a3bf68e5", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135519, "uuid": "9c24ed6f-c395-4de8-9303-75497fcacc2a", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717135519, "uuid": "be28e454-e22f-440f-9685-38981a930724", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "086c183f-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717135637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135637, "uuid": "95f79706-d00a-4ad5-b869-cf5ba117cc8b", "comment": "Malware payload (Amadey)", "value": "6dcd783d06f0f809c90ae5e0b3f43732", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135637, "uuid": "23013828-b8d1-41fd-b587-d451c41050c3", "comment": "Malware payload (Amadey)", "value": "2bd89a3dbe566f064ca1c9d3521d5e1836f040910d8bad535cd76fb81230379c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135637, "uuid": "992ded02-c3e4-44cb-b185-9c868797e6fa", "value": "T1C795331A59519F42FE3C53F2B4D1339B1EF146328B3A63FE37C6601793F9944AAA92", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135637, "uuid": "b893bd67-199b-4344-a0dc-81963bf8b2c1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135637, "uuid": "b8f4085a-a83a-4991-bc4d-d522a5d9f231", "value": "24576:T57a/VsnRI3nAjWcvUtSh2PsCnMH6JEOx3OUAYhNz3Z26xLO97AVEkPydLmqzi70:JA3UW9tSh5CMH6xvAYP35auy7im", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717135637, "uuid": "d4fd78e6-f31e-4bf8-9c91-402c703c9e54", "value": 1949184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135637, "uuid": "ba326c2b-0353-4027-8cdf-209d6a31881d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b05d9e0-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717136527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136527, "uuid": "722c0a87-0478-4a57-80e5-80cf806a5d04", "comment": "Malware payload (Socks5Systemz)", "value": "3ebe6800e98e3c209e33b7db0df882ec", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136527, "uuid": "4ae0a912-f648-4e35-934b-232c05fc609a", "comment": "Malware payload (Socks5Systemz)", "value": "62e9f214d77d30bb561c5b18ae9cad5bc2683bbbd59e5ab3bf24701814e74bf4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136527, "uuid": "ef9e7f96-6a99-4d28-9a9d-d151234a4b42", "value": "T1FE463317F7B20C36D9978FBA3DE20258C57767B1B93138AE918849D04CA33E1AB95F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136527, "uuid": "acf46339-bda1-4c9d-9407-758a51679d3c", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136527, "uuid": "209a7e96-aae0-42f5-ae05-ee02dfef4682", "value": "98304:mVjf1UrlPgtzjlrWh2pmGpGHdtpibp7MA6F6cHGK3NxwqM5Kg1zpzH+fNXFRC:curqtzj3VpS0b2A64cmKjMKgRpzH+fQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136527, "uuid": "62e37b05-c3ec-494d-90d3-4ab899c230dd", "value": 5389677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136527, "uuid": "65315669-d68d-4b4e-b99b-02b845788d36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3fffdf5-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136757, "uuid": "3da940a7-1c35-4473-b5e0-a9f03b408c8b", "comment": "Malware payload", "value": "faa9b9d0558cbdb83e016bb8dab46c2b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136757, "uuid": "da5fd4f2-ec15-4018-98be-24c5ad37d362", "comment": "Malware payload", "value": "36ebde09d2ef235f66862cc36b531ea22949062f38584a0d100337bec6f299c0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136757, "uuid": "24d2afb4-3784-4b8d-a279-20dc58c04604", "value": "T11E45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136757, "uuid": "9a5952a4-4c57-4571-986d-10a31c14a939", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136757, "uuid": "476b9a13-dd97-44c3-bebb-3056730eabbb", "value": "24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8auN2+b+HdiJUX:xTvC/MTQYxsWR7auN2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136757, "uuid": "371304f1-98f7-449f-8d16-fc22a57f1d92", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136757, "uuid": "a047d1eb-7da8-4b93-a474-a4e058e71188", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac2ea882-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Ransomware.Mallox)", "timestamp": 1717136771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "2b4f3120-31fa-489a-91d7-e8c982153a1e", "comment": "Malware payload (Ransomware.Mallox)", "value": "4532803225b8b1a8a7811a44f3f2e2e6", "object_relation": "md5", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "59bab1e3-cdb6-4fd7-b881-d46d40447201", "comment": "Malware payload (Ransomware.Mallox)", "value": "e0b6c83aa3aeff6d7d5fb4b5863cc94ca6158e12fd049d6863322bafb244a41d", "object_relation": "sha256", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "715e63ee-3ef8-4d70-95a1-9c66add4c567", "value": "T194B13A7AAEF881BCE35F80F040FB905576BE50483B47CA4F066D819BA031D699B03B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "2681da4c-0359-4c8c-8807-c0b0fcd4f986", "value": "96:p08YGKfDqJbUs0sIJYPOyjSPodZ3z9bct7Edd4U7URVXfYvcpIIFn:u8YnD245s1OyjcoZbqYj3URVvCcpIIFn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136771, "uuid": "c7db3500-1e47-410d-ab41-100a0a29f99d", "value": 5241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "3a4f1e49-bf08-421a-90b3-1820e504b9d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac2f54fc-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Ransomware.Mallox)", "timestamp": 1717136771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "c2404e85-5e48-4d47-9fb5-3cf68e724003", "comment": "Malware payload (Ransomware.Mallox)", "value": "71efe7a21da183c407682261612afc0f", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "312dfd90-c332-453e-9fa1-c4bfb4d1f128", "comment": "Malware payload (Ransomware.Mallox)", "value": "45a236e7aa80515aafb6c656c758faad6e77fb435b35bfa407aef3918212078d", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "27c0b021-a051-4b42-a34f-b3fb890003b0", "value": "T1B4A48D56B7E509F8E0B7D238C9634A07EB76B8150350D7CF03A886B61F236D55E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "a8caa011-0d15-44fb-9735-861421491ccb", "value": "cbe53f46121d600d26965890ee97a94a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "b548e2f1-3f53-4ead-b01d-e1be2d7e6162", "value": "6144:W0wmbI4/Z4SHvrxw6zaIST1w9wEPDasWxxsBhS37b8o6XCFyPwCMa6qnXxq/y:7zv66zaISTW9asWxxAh4IlXC4PUqBq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136771, "uuid": "8b1bd6eb-e125-422c-8894-d56dde355f15", "value": 489984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "50fc5628-e156-4dbb-9ba3-262bc9cca96a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acaf8ac2-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "eda72900-9b90-4667-9195-b381d2d9c59c", "comment": "Malware payload", "value": "611b53a7a5d1dacc182c271ebe02c3c4", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "c4ee7a0e-3a25-43a4-a091-8490c35e506e", "comment": "Malware payload", "value": "bb7ae99db7dc6a15931e279556f01454c44b8641e583d96a95e6213ca22fe416", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "1812463a-8378-4f63-b336-bf2ddb7f827a", "value": "T194D02B4CF80208B7F4358CF976DB2449C10F938D6F0B16CD5188111FE4F4818A0204", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "a4367db9-d9d1-44e7-88ae-c1a2d7a05846", "value": "6:/VJ+pUKUF2RVYrUZoUtYfFwIxKXo3FsDKVKMwWOXqIKa03IKq1IEE1IKBKW:/VJ+jRxYflKXjWgTWsONI08W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136771, "uuid": "92824dd4-46fb-4ba8-9120-d10363eecdb3", "value": 263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "e208c8f1-11e3-4015-a47c-48e6683c0406", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acb35bbf-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Ransomware.Mallox)", "timestamp": 1717136771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "d48e5e1e-88e8-4205-9285-0a61a4126b15", "comment": "Malware payload (Ransomware.Mallox)", "value": "b5b20e03ae941e9f21c444bd50225c41", "object_relation": "md5", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "e06cbf5f-7ad3-4aec-ae5e-8dfcf67b437d", "comment": "Malware payload (Ransomware.Mallox)", "value": "c714df0154f2b6fc8a82aa35281836c664bd3fbf4be3efc7e8b5b94ac87fc0a6", "object_relation": "sha256", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "244d4f25-b24c-4ffb-a25a-8fec48e5b43e", "value": "T1E8410E2361B7C61A4866C81C28EF0A98EE1DA14F70E42AB176DC94C4FE612CDD0B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "59f34a65-91e2-454c-8d86-2ad3989d1d83", "value": "24:GE2Xx2U4rwrffEAL5N+1Q0gOZZM43kgS1Exl7bRc8pgRkU2iugMl5MBAL5N+1QB:e4rwr3EY+fgOZZM43W1o7b28p+oQY+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136771, "uuid": "eb80e839-1417-47c7-8d65-dc5f45a7d181", "value": 1885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "ae34dbd4-ad3b-4f41-b066-f19db9c0193c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acb86ae5-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "e3ad90bc-eb7b-4671-bb16-ff856f622486", "comment": "Malware payload", "value": "dbddbf979b84bfcf2b26c0ec3d997e49", "object_relation": "md5", "Tag": [ { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "2101d085-3560-493f-ba9f-5c0b14d76321", "comment": "Malware payload", "value": "6aa55ca0b40a59ec42e1791164e3acf378774d25d3528369920b7739503eaa79", "object_relation": "sha256", "Tag": [ { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "d0bab8f3-30ac-4da0-9389-438dfb2d5b16", "value": "T10B3423C07F6F9C08D0DDC1FCCAA156874A6925B8D6989F4750BAF1A60F70B1E82E15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "ea411f3e-500a-4093-a8a5-4783790a5d43", "value": "6144:Nje2RFg0u1d0HOOT2IFn+Vu4PHxZ28C7fdZPh:NjrRF3+0HOE20OP+Vvp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136771, "uuid": "c57e0d0e-6380-4b0a-b8a8-aceb4a802e19", "value": 231975, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136771, "uuid": "547e363b-9937-44fc-8494-04ce92b189cf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acf4a794-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "bf14fa88-655f-440a-bc62-9fe4f4f31498", "comment": "Malware payload", "value": "2ddfe23a170af97ebbfe8ccc260ef462", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "ada83ac9-912a-451b-9298-6a96db42752a", "comment": "Malware payload", "value": "56149c2caa7e4b648802d12d51fcd0d6523640925b44524d5261f193e7e217d6", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "f21489b4-4e6d-43eb-9895-1a248fdf1e05", "value": "T12CD37B1075E2C473E5B229300878DBB15A3DF9310F609DBB27E8167A8F343D19A769", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "e4fe5ef6-d70d-4ee8-83a0-314f7963078b", "value": "198cae56a522dac5925be33cafddc4a6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "80550a48-4df9-4122-9fa1-bd2893912b44", "value": "3072:WVgniPw13ewPXAFFOCpOiAiZNYF4sn3zckV/N+Ag0FujTXfh9v2Vht:WVgnwotoFF1pWaNYKsnFEAOBJ2Vht", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136772, "uuid": "505265e6-0965-42d6-b939-7ff28ba5806e", "value": 141824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "9c9f68ee-5f39-46b5-8479-391ea98765e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad30ca72-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "7ae6ad86-2160-4a03-a586-5b0188630452", "comment": "Malware payload", "value": "dba66f7c173642c951e48f714a40da71", "object_relation": "md5", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "9fa73b64-14bf-47e0-a907-1802218d6896", "comment": "Malware payload", "value": "4618cee6f93e99ed609373a987bd74cb416751b9db943c22fc05cf0a0e9ba29c", "object_relation": "sha256", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "6daaf5d0-4a5b-460b-90a0-1754e2dd1f31", "value": "T1AA663365637208F4E8B5913EC1A5C26DF2B1B8664765D78F13E00A533F27BA24D3AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "8aa4bab1-b33a-41cb-b09a-c88fbaaddd57", "value": "bae3d3e8262d7ce7e9ee69cc1b630d3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "504f1b2b-521d-4b2e-9a05-c53915f9be80", "value": "98304:TW8GAx9XQsjA1h9eT393YigJhH0y3T+q2M51Y7uRlXgVLRuq97TgLKhOCVj2O:TW3U9VjA1HeT39Iig7auDXURuAT74q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136772, "uuid": "6a4aa41f-906d-48fb-af6a-349846b4773a", "value": 7055876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136772, "uuid": "8e514136-88b1-4e65-985f-4d8f203f371c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1f32a5d-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136780, "uuid": "06fc8ff7-2903-4ccc-aa07-d5fe8904e8d7", "comment": "Malware payload", "value": "20f8019b945822f5f83a224a6f60a59b", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136780, "uuid": "9ec36dfc-7dd4-4b04-b542-3662d4d37648", "comment": "Malware payload", "value": "42bcd4c61e68a5dc2b7ce3b7cd2a61945ba3d8073380f46e47bb9cbdc295dc28", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136780, "uuid": "24f9a015-c31d-47e5-a709-4d3e2f123246", "value": "T1407633B752681288E0DDC83A89377EE5B1F613FBCB41A8BDAED964C537215A0D213D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136780, "uuid": "901cf28b-aa93-47b2-8c0f-eb5213ac0637", "value": "91fbf3d9e997c17a1ae5ef07f5027ad3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136780, "uuid": "62c042f9-c58e-42ef-adbf-95f381081287", "value": "98304:UcThyLP7ww9Juv/BUkcYV8ASu0FL6olL/Ijct1J4cA1k5PVS0zzXAOV7Px1mDTrq:4LP0g5eNSPIcs1k1BzbAOVbHmDT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136780, "uuid": "f437ee69-89c2-4c55-bcff-9f21b5aae913", "value": 7269376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136780, "uuid": "13a930ed-4a78-43cf-82eb-46a4e479022f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d143db0a-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717136833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136833, "uuid": "ff2de837-e3da-457f-8849-186a924e2bb0", "comment": "Malware payload", "value": "136b642b7b123859c53082bc1a52856e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136833, "uuid": "490643f6-6647-4922-ac68-4d57b687233b", "comment": "Malware payload", "value": "8daca6fbf401080254b2c7d3318ad217c4b109339fb1312fef8369a75bc0fc46", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136833, "uuid": "b3241e64-6584-438b-bc0e-0b85b12a288e", "value": "T128B533E6BF7AD736E5E785387DD38708E9AEF5C346353E34031A2A191D05F08A6484", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136833, "uuid": "35e574f1-1a46-44bc-9b2e-8d0723eb4440", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136833, "uuid": "06c750dc-8020-41cf-8510-7ff5cc6b1757", "value": "49152:7Ok4vunrMCEGRjE6Xfy2hhfFyxFok/f7zyg5uM8NNrLQ+QZyo0z:SkNrMCEGRjJXfy2hbSFtWg5n8Dnqg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136833, "uuid": "185842d8-0f6f-4abc-9791-7c4934147a2b", "value": 2464768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136833, "uuid": "bf5b48f3-bfa9-49bd-8b54-0976c6394f02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ceb9e8b-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717136960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136960, "uuid": "e8de22dc-c537-4d61-a27c-ff0d527389fa", "comment": "Malware payload (Amadey)", "value": "1df5d38d44d6821ba587a399daf9eb83", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136960, "uuid": "24ca01ac-d0b0-4899-a6b7-59c54695df3a", "comment": "Malware payload (Amadey)", "value": "bf3e907ed150c7a8c1046c550d09f9e6309db73ea4d2c7e5c83da928d0a19b54", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136960, "uuid": "f49aeebe-2f69-4c9b-8de3-bab20a6f7cbd", "value": "T1E09533579BF694D7ED9BDC7B60428851FD16147C5AAD29B18482913E2EF3FE8CE803", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136960, "uuid": "593140e9-22e2-42d8-a65b-50f4746d4415", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136960, "uuid": "f73e870e-47d6-4577-94e0-d3745c0888c3", "value": "49152:XE31IJLLI3BtM9dH8IhswdVA6VSwS/eQwKovE:MIW3M9dH8CswdvVSwS4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717136960, "uuid": "0ed43cc7-f3aa-47ac-a4c8-0146ba418542", "value": 1917952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136960, "uuid": "f93d3595-98fb-48b0-ba79-f960631da1b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef3edeb-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717137205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137205, "uuid": "e2a5253b-1908-4457-b18d-777999ab613c", "comment": "Malware payload (RiseProStealer)", "value": "884904d2a2342358daf702d3c72c6d22", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137205, "uuid": "b1bad82b-c38a-42d8-882c-d88bcccdc2f2", "comment": "Malware payload (RiseProStealer)", "value": "1fd909e76ac870570c861243a1a2084b520c9a76cbff8b5cc5f6d8120ade1b41", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137205, "uuid": "9070ec0b-44e1-4c5d-8c60-04cc2ab50e7d", "value": "T1EDB533F11EA4AD72D2A84933E0F282E5362964B08F873733720BAEF14456F5F79E14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137205, "uuid": "7712833f-a412-4f2f-a3ca-591577a4c3a6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137205, "uuid": "1052e14d-2a8c-4606-a131-89cf6c90b312", "value": "49152:GkmKhyq24kI3qebVaBv/DSloWskyVbP2hnWhB2+DphGsIqGLjgx:GkmKEqlkAbkdPrVbP24/2+14s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717137205, "uuid": "29589558-7664-495f-ae25-b0b43ba96a5e", "value": 2384896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137205, "uuid": "7705465b-04ee-411f-a51b-d3e110a86012", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f41eaa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717137206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137206, "uuid": "e94985a4-df85-4c6e-8755-073508d5a8c2", "comment": "Malware payload", "value": "b7c1fb454c8c20aa7fe7aeb6180d412f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137206, "uuid": "8056ee76-b45b-4375-bdb5-2d2808a1a74c", "comment": "Malware payload", "value": "810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137206, "uuid": "a34e7f19-ebe7-41d1-86d0-f9b23c1ef5f9", "value": "B9B2E18622993703A4635AF4F27D7F8A72067D68AFBE943B45503123707321E6758C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137206, "uuid": "73d1f5a1-25f5-4d6e-a070-f0a203e2436c", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9LrEQSXh:YTYIDfYG6ZmewZ59+Nw1qsREHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717137206, "uuid": "a260a1f4-cce7-4512-9648-d521cab50fa0", "value": 24616, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ab06992-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717137520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137520, "uuid": "13e957bc-0ec8-4254-aaaf-1c9b517fb6eb", "comment": "Malware payload", "value": "890122149f79e119b8e6a0bc98ee5002", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137520, "uuid": "20c6aa28-ebae-47aa-8241-1a89224f2614", "comment": "Malware payload", "value": "ee2971935fb535c22067dcb2f968e12f7147f323db29c0ccf4b04dd69cb1cb46", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137520, "uuid": "bf4922fa-4f1e-474e-a48b-6328eb1c4d38", "value": "T1C9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137520, "uuid": "bc1ecbd6-721b-4a06-af22-a4c5e097a5ca", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137520, "uuid": "59d3ba1e-7721-45a4-a50a-c771002b7458", "value": "12288:1qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T5:1qDEvCTbMWu7rQYlBQcBiT6rprG8aA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717137520, "uuid": "7ca88a2a-78c9-41a4-96ce-e94cc59b37ea", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137520, "uuid": "02a4f826-f493-47a6-8379-92a6db8f4ef0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "996170ae-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138027, "uuid": "04a9ae6a-f6e6-4f9b-963f-b973a36c1f98", "comment": "Malware payload (Gafgyt)", "value": "92cd7ff5b90b50afd5c5f987710a2bd3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138027, "uuid": "886543e0-79af-4956-b7a9-e88a04cf46f8", "comment": "Malware payload (Gafgyt)", "value": "b0fd7b48f728fed8b5818d25123c96d3e09da52c7ed9687b2d12b40d48448c0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138027, "uuid": "982d798c-6aa8-455f-a5c1-ff3698b6df6b", "value": "T19CD319B6F2C0C572D18306B111A6DF360C32F6F7179E650AE3B81DB4DE6618236A5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138027, "uuid": "1c179752-c342-45ff-96af-1b3c609f1857", "value": "3072:S/Y7jUsUqUZUfU6mUTDkMVw3Zny/uqlx6DXVe5h2nHnnTx9xqjmJswdytNr9:SAbvcc8yDkMVw3Quqf6DXY5h2HnTWmJK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138027, "uuid": "053320bc-ffcc-431c-904a-4c95d231abee", "value": 138662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138027, "uuid": "0730d515-e81c-490b-88e6-fe6aa7d9717e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138027, "uuid": "016f5649-ab18-451f-8793-1e2ed3976c2c", "value": "t1c6215352a1f5cb282bb389349dbc07f1225666136242bf756f0ec5c458330536938d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a56d802-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138029, "uuid": "1168d355-2066-4689-90c3-eab061f4b08b", "comment": "Malware payload (Gafgyt)", "value": "6e9bcfd5ffb2757acb966370cfe407b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138029, "uuid": "8db59504-6b1d-4b7c-be47-f2502bf6377b", "comment": "Malware payload (Gafgyt)", "value": "3d850fc74b71ce7f70cf6af41e0a40801b341d48ceed206055ca19451d85a5fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138029, "uuid": "643f823a-2abd-40f9-a145-929a984c99f7", "value": "T13EF33A76E0948EB3C083AAB528AEEC310F1185D3176F3A96127957F04B5F5CA744EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138029, "uuid": "09e363dd-8d1f-4587-a2ee-78c177dd5c1d", "value": "3072:n1iC141o14BMxBKikdRE5hQV8mwsweDdAH:1tSoiMDf5hQV8mwsweDdAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138029, "uuid": "6db80acb-1eee-4022-80a9-841d20b82cde", "value": 160069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138029, "uuid": "9e3f0893-6929-44f7-950b-dacf02b60d41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138029, "uuid": "7a7e2730-5170-4d86-b814-9e7d40091d75", "value": "t141213e52a1facb282bb38924adbc03f12151a6136242bf756f0ec9c45833043a974d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9aaf808d-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717138030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "506e9047-7ff6-486c-aa0e-ef85d6efdd7a", "comment": "Malware payload", "value": "f5466c8c53c90a71e920ed51d71b7f4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "1c3ad6f4-e80d-4878-a758-bd21981b9951", "comment": "Malware payload", "value": "c9673da99792b144251cacbb20914eb60f8b066e58711a93977d13e54d72291b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "da879e45-9167-40b2-97c6-cd7c9b92edc3", "value": "T19DF308B6F401CEA2F04BD67208DB8E256E31B7E30B53222263673667ED761C53857E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "dd07d700-4912-410a-811f-bce6f7a29ed3", "value": "3072:Iiwq+t4m2jUdTqrPQeqacWucW0JcWcB1ELySlfo5PfVB8DuvvJ31tbmmu1kTL3m9:PPQeqacWucW0JcWcBOy4wl9B8DivJ316", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138030, "uuid": "a576e8b0-6dc6-46c8-a2db-7882dabe2214", "value": 160038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "41ff0fe5-3ae6-4801-b37f-560394e7c3a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "00f20346-3ea7-443c-8a40-89f5bd3baf3f", "value": "t17e213152a1f6cb282bb39928adbc03f11552a6236242bf757f0ec6c45437043a934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ac65928-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "b82e55d3-8659-43a8-8dc0-3293d5ce3b11", "comment": "Malware payload (Gafgyt)", "value": "1636b0ed2bbe6b7fe7c24fba0710db45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "fe22b5fe-89e6-4029-ae0b-2815c882ef11", "comment": "Malware payload (Gafgyt)", "value": "169a6c386a295f3157cd5150bddb34854c29421779dd5d7cbf2c8b8277f894b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "ff4e67ed-ea77-47c1-a91e-f53cca432328", "value": "T112245C24E5404B57C2E323F9B68E824E3B3347E563D7330A5A345BB43FC2B9A1D669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "79c48f9a-6caa-4191-80dd-3ed694b5ba6b", "value": "6144:3MYzMaiiwXBAratE+L5hZR6e6xV7jwom0wfB5RyAn:3MYzMaiiwXBAor5hZOzXm0mB5RyAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138030, "uuid": "401c985d-8efe-4d5f-969c-cd1be06f0f75", "value": 210270, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "18f7a700-fb15-4671-aaa3-a5fdcd451964", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "9cb4ca91-e04e-4198-98d0-a5ebed0ad449", "value": "t114215352a1f5cb282bb38934adbc03f51251a6136282bf756f0ec5c454331436934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b224c89-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "48045dea-966c-4012-8d73-acd6485a5b04", "comment": "Malware payload (Gafgyt)", "value": "67a2ff07a274fc4d60c12d616f0a45d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "27ef3266-ea73-44ca-8254-369930f55f0c", "comment": "Malware payload (Gafgyt)", "value": "b15353b978cbc040ec6b064bea44306b9c2e45ef412e3a462ca974d64abc3e2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "f55a1495-7e16-4dea-a671-34c42dd64e8f", "value": "T125F34CB7A21C0353C4C705F02E7B3FF24F6896E222F76045561AEB904B73AB62561F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "fc4ceaa0-1b92-4219-bfd7-1d2906e0d206", "value": "3072:SNqI2YICsNvPeU+Pm5hkojTDmRsSiSh3n:SNqI2nzk5m5hkoXDmRsSiSh3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138030, "uuid": "79aeb924-7bbe-4566-bf18-a97d20022af2", "value": 161741, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "6bd13cbd-ec91-4d7d-b175-f23450de30d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138030, "uuid": "ac8127c9-f603-41b4-b4ab-8b897f240d8e", "value": "t1c0217553a1f5cb282bb38934adbc03f1115166236282bf716f0ec5c454330436934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b427259-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "f48a4dcc-dba5-4da0-abb0-dc56ebd1c683", "comment": "Malware payload (Gafgyt)", "value": "93b8815fa78cfca998445f423900c2ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "4d23e684-e481-40ac-991b-e147443c6f72", "comment": "Malware payload (Gafgyt)", "value": "0b1d522421a13bb1d9da994a9ea7a77cca7b6ef81d6ac63035227660324b1445", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "66d6d18b-e879-4844-bed0-7b19f82cb4c6", "value": "T14604E73B77260B23C0D6407001E7A633BDB5C3D630B862D76AE06E5C6F1A9D43696B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "958ad002-9173-4066-b39e-f57d16a4e358", "value": "3072:tvq41eGNmDtVpixNOAVBFf0ojgphap2HPmRPoeYz/Dm4wABHo9n:tezVO4yHrjgphakH+RweYz/Dm4wABHoh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "768c383b-bb31-4be4-ac31-b6e5dca86cc3", "value": 186316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "e0622545-bc6b-4d93-a219-211d0ba88bb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "cd4ea4e9-0779-4d34-b4f6-ddfb076fb659", "value": "t117216152a1f5cb282bb38934adbc07f12256a6136242be716f0ec5c45833043a938d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b5abaa0-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9ef4c900-9371-4922-8317-d09708d3fcc1", "comment": "Malware payload (Gafgyt)", "value": "7049591cc9dc63355609828447b47de4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "b4d61a19-5064-44ee-9918-84d22e4aaba6", "comment": "Malware payload (Gafgyt)", "value": "22c5b965bf68010e317509f6b87661f936caed5f124e7bb1a2f46e4449018916", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "15dba88b-88f3-43c3-8f7f-ff37ad5d6031", "value": "T13724833E7912AB7DE1A8873207F76FB09B9511E323A19341E26CCB185E7125D2C8FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "83302482-de83-4f3e-84c9-a8b580f5b280", "value": "3072:BsNgAMX6gv+HNBmBMgYzJ3YH3uCjJaQq5W+gPTex7GS3sRRRn6G5hgn06Y7mrpy8:CpAnn6G5hgn0vmrpy6n9Nn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "cce44405-0e3d-4622-bef4-853cccba772b", "value": 215144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "fc998bff-a183-43e7-bfca-50801b4f0cd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "466ef411-045f-4fab-9810-8c12ac7a8940", "value": "t1af215052a1f6cb282bb38934adbc03f12151a6136282bf756f0ec9c45833043a934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b5f7b34-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9534de6f-e754-4673-b46b-757c66739875", "comment": "Malware payload (Gafgyt)", "value": "d80c4687dff3759148bf1dcfbcd23490", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "e22bbfb1-cf03-4699-887d-8933d48d0834", "comment": "Malware payload (Gafgyt)", "value": "0e576a05039b5655975a21c3ed5eef2bdf1cedc498e6039f647c8701a8dee2d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "0b892888-8c88-461a-9f78-49a56513a2d4", "value": "T148245C24E5404B57C2E323F9B68E424E3B3347E963D7330A5A345BB43FC2B9A1D669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "8da454dd-9762-4501-b950-35a1ba5705ad", "value": "6144:3MYzMaiiwXBAratE+L5hZR6bGrxVjwom0wfB5RyAn:3MYzMaiiwXBAor5hZh1Nm0mB5RyAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "f8dac840-cc26-4daa-8a43-7167a9ffb021", "value": 210270, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "ad4249c8-b74f-4dc1-b8a4-f69a8d007e2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "781b0db2-608f-470d-a509-a31fa9db8817", "value": "t114215352a1f5cb282bb38934adbc03f51251a6136282bf756f0ec5c454331436934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b656e90-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "29410048-7020-4710-b89e-1a614289fce0", "comment": "Malware payload (Gafgyt)", "value": "2f3fc7f9d9948da46670bebe0ab8248f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "1b0bfdef-20e7-44b9-b12c-0876749ac460", "comment": "Malware payload (Gafgyt)", "value": "bc2461da6c42ecd5465dcb0e4e23b6b205ba4315eaba364114c8efe2a8bb11cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "1f985d17-d387-4035-8f7f-b140cd7b6501", "value": "T14FD309A9E342C2B3C44706B2015BDA3B5D31F2F7576EA50AE3681E709E624D23195F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "969ad1fe-f5fd-4dc7-869a-0451e3000a91", "value": "3072:Qc9un9AV4bo7pnPjRUmShkIuwRGk5huvA2mJswdytNr9:Qc9uCyoNntjKGk5huvA2mJswdytNr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "abe48f7c-8992-457e-b562-b7f19135d5ab", "value": 142599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "69eb37fd-6fa0-4980-8bc7-a634a27a7e1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "0674fa96-db17-4ad0-9109-bba1ab501b59", "value": "t1c6215352a1f5cb282bb389349dbc07f1225666136242bf756f0ec5c458330536938d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b6624e7-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "77395b5c-b8d9-48de-97b1-5c980cc5976d", "comment": "Malware payload (Gafgyt)", "value": "5f0cf7732c18560efb3a76c6e749b3a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "e283d2ca-83c0-4beb-b0e6-33526baffae0", "comment": "Malware payload (Gafgyt)", "value": "0a551cdd58b6c3fdae603be4934f60b56b82aa165cb4b880890f273d59d30548", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "cade9dfe-0cca-48a8-8ea9-73d0601e36de", "value": "T120F31824E4448367C2D327FAA69E879E3F310BE663D733150A346EB43FC27952D269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "1e8783e9-d77c-485a-b3f2-5f3755a6f1a0", "value": "3072:nAOef14Isyl7pljDZzvfyivFwp+7Xk5WKQWTWV5h3k7d3IOUmSQnNbGUBn:oNsyl7plj5vKuI5WKQQWV5h3k7dRUmSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "17cb43fd-ccc9-44ed-8a51-c827b2c5b30e", "value": 171215, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "711fad39-064a-4428-8e9e-a6bc30787851", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "23926fae-fa88-4d5b-aeb1-8fa91bdb06dc", "value": "t12b215352a1f6cb282bb38934adbc03f11552a6236242bf757f0ec5c45437043a934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b85f1e5-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "17700ea2-3051-45fe-acdd-fe41f8919698", "comment": "Malware payload (Gafgyt)", "value": "8a92ac6c0b3f8fff622508651c350fc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "ad48211b-62a6-46f2-97e3-878748947b4e", "comment": "Malware payload (Gafgyt)", "value": "19c1d271bb67423da4dc04d23ca7f7d8ddb5311c47b95b1cb14961829470faaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "57ea9df1-3c97-4b1c-a841-a4f74bd0edb6", "value": "T17CF30833F2E08CF6C04312B216EF8AB29D22F1FE0372715727905EA15F5E9869E55B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "41bbb631-636f-448a-8799-68ec8b9dfdce", "value": "3072:pzarywUUUDX7ClNlDued6phahpSRtqUuZoscoKoUmBT38dAY4:JXq6phabeLb5mBT38dAY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "53f335d6-640a-4b86-b155-8ae6af61b8a9", "value": 159844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "99d82001-215c-45d7-8f0b-8119342a1054", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "5f3a869b-b379-4c5b-bc75-cde5c3240dda", "value": "t161215352a1f6cb282bb38934adbc03f11556a6236242bf757f0ec5c45837043a938d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba0cc53-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1717138031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "f65d08c7-2eb8-48d5-b582-d6a95bd112d5", "comment": "Malware payload (Gafgyt)", "value": "74e457a4a125a7023358372193b344b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "d2ec3a9b-1c86-40d7-be59-ca7f2f599e32", "comment": "Malware payload (Gafgyt)", "value": "610e7d7613c05cd0a02660d0a46d0d322ee9fd9c117559b117312468733a590e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "3fdf4cfc-d64d-4dd7-9416-fc8518ad1da6", "value": "T1A724956ABB611E77D81ECE3301DA45121C8CD28653D97FABB2B8C618EB9794F04D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "dc6b5903-d1f4-4546-88a4-252cef88aec2", "value": "3072:zm4cBFNdn6cUhPgn435hS+DpLmrpy6n9Nn:z2pY9gn435hS0Lmrpy6n9Nn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138031, "uuid": "8dbd216c-b604-4307-96e3-2ccce097864c", "value": 215096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "5acf5a17-b5df-426a-aff4-3a6b0715ff5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138031, "uuid": "3c2d44f9-ffb9-4347-92e0-1677797491a3", "value": "t1af215052a1f6cb282bb38934adbc03f12151a6136282bf756f0ec9c45833043a934d", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce89fc09-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1717138117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138117, "uuid": "9daa96c3-12dc-44ef-b4d8-a6cac4e6da6a", "comment": "Malware payload (Phorpiex)", "value": "df2886a054118bfad2738351878987f5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138117, "uuid": "58a4e374-d72b-41d9-b444-4f955022328d", "comment": "Malware payload (Phorpiex)", "value": "b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138117, "uuid": "bc94cead-7449-4a3e-a305-9330265ae1bb", "value": "T151921806A95A935BE8361870A3B31D35A07DBE72631D95CFFF8005791260EE4FA333", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138117, "uuid": "66320009-12e8-47b8-a6f1-8fb40287a0bc", "value": "fb0ee5bafbb99ce467989526f0be15c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138117, "uuid": "6962554f-78cc-4a06-887b-3ba68aac08b5", "value": "384:+EpiPNDeVU9iCUAdAAtlYxJ4JVB00FXMSKR:IPNaVUhU+LYOvFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138117, "uuid": "3cd747ad-2b3d-4d2b-90a0-a86d275b83a2", "value": 20480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138117, "uuid": "6a92aa22-8c0c-4811-a834-5538483a7b54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "894f81a2-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717138430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138430, "uuid": "d759ad23-a470-4bed-982a-15ffaf72cf23", "comment": "Malware payload", "value": "452b75793501e2cdd37b6c1db8aebe10", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138430, "uuid": "ebb6c624-7c52-46fd-9d65-da58744b6120", "comment": "Malware payload", "value": "6992119be8d5198536b0beb43614cd4926b66f92ae51b1df4bd12ed1374c3e81", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138430, "uuid": "0bea8722-34f7-4b15-8970-7fa6e61f5954", "value": "T14D32C0C5CE7FA363C5156C5DB4F2ED32972934CB11827ADC06142653EB6120428CA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138430, "uuid": "c776d445-6b60-454f-8564-2afc61db0e12", "value": "192:8JS6NHUdXOfUj4ymrXi5yd5b3pLh1qP1P8irztaBO//NoTHg8NXQvPD16JwF3P+X:ySuHOo8JYy5yd1ZLh1mdrztc+/No7ETu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138430, "uuid": "a6a27ccf-4e1a-427e-a9cf-cedf97eb6747", "value": 11008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138430, "uuid": "3669c93a-58d9-4288-b05d-fa576db1abbf", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c8a19ce-1d3f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717138814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138814, "uuid": "39df0a70-b748-49ff-8b1b-bd32a6076b0b", "comment": "Malware payload", "value": "8831dd6f330f9e7686122c570f3f042e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138814, "uuid": "66b7e9bd-958b-4ba6-904a-3ba0e048dcc6", "comment": "Malware payload", "value": "2be800f792d9dfea4e5644b3c340f193568126b4771e0c2dcb95e0d047464b41", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138814, "uuid": "1347fabb-f61f-4bd2-b605-e1a38e556b93", "value": "T1A65533A3E43C412AE2C6F1FCAE045B2B9ED79C1FFB6D747A1D4A0390540B1693A348", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138814, "uuid": "0b1ba52e-6616-4ca8-a146-65c156033790", "value": "24576:Y7hmr1CcN5gpXhGbQtTYlW5LvqmusRbPp3TL0KYVlmQ9Bq9jZ:YUrpN56XhnTIW5LCRkPp3TL0pc9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138814, "uuid": "75701ff5-a0d9-4117-b772-e820d94c398c", "value": 1299596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138814, "uuid": "6e605eaa-ba59-4c2e-9c85-258c7cbc8b44", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138814, "uuid": "e0ebb498-9c96-4d28-8e33-1e514176e221", "value": "t1bc90021051496a31104118035503ff94259054f9d21634540c5ab450d87b5cc61312", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b719b63-1d43-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717138875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138875, "uuid": "b14c768b-9f52-4786-b7d5-94c73396a28f", "comment": "Malware payload", "value": "58b4e50467f3274b0776720f39b3c266", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138875, "uuid": "0a1230cf-b8e6-438a-bd90-4f8c4f81297c", "comment": "Malware payload", "value": "eb3b0390f06a0c13383c7478f4f1a55520a31b8668141b3b2792c371e7bcba69", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138875, "uuid": "b8f10a3c-d925-4c0d-bdc7-bae5ab85092e", "value": "T13195334BD06CAE134406EDF42A04D862E4F255BC7848CA7DE069F5EEC35CFEDAB169", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138875, "uuid": "049a7b52-f950-4e37-a803-138ecfe421ad", "value": "49152:sS+KYZ0dszqm4Q7HigqNX3BwQcxb40fzqk:sS+vZ0dsf7HigqbHqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717138875, "uuid": "30fee665-bca3-4134-947a-4a19a92820dd", "value": 1906336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138875, "uuid": "a25085c5-140b-4340-87ee-52e09b94df23", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138875, "uuid": "80b667d2-9e9d-43fc-9c81-81519238654c", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a02a0645-1f1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717139763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139763, "uuid": "3ece7257-08d6-4bc5-a86d-dd5055ac8930", "comment": "Malware payload (Stealc)", "value": "1e1edc9918e2a3c7bd885316ff3727ce", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139763, "uuid": "0a64e414-c6af-4bac-916b-19a3fc8ac679", "comment": "Malware payload (Stealc)", "value": "c113f42e77f3a5b8d27f0adb4168992d586ad2fdbc7f2b10b5de564433525fec", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139763, "uuid": "d37e2bb5-b3c5-4bc6-b0e2-63bcf3c17097", "value": "T1DCA5CF2FB1A38836D1F21A3D9C6B5764452EBA033D38FD463AF41E485A7714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139763, "uuid": "9470c59c-f7a5-48f7-9b56-2c183bed5665", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139763, "uuid": "fbf3f599-d655-4d96-b1a3-5182bb9db0e6", "value": "49152:eqtdPVosJEMz/+VHA58ljrIY+96lJS9bZ:e6d9fJdc7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717139763, "uuid": "6d81cbc4-6988-482c-80e8-bb0ea4c40e89", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139763, "uuid": "20045404-9135-4fa7-b540-a0d362fedbe7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f864d59-afc4-11ec-b287-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1717140248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140248, "uuid": "55b7a588-14d8-474a-9f71-f09d8e1a7245", "comment": "Malware payload", "value": "f1abfb839c7bd32b5034cba30859f160", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140248, "uuid": "ee5bae06-936e-49a3-8fd8-29683782a20f", "comment": "Malware payload", "value": "9a963fb204c95bf85dcc0ef4986b889eea513c622249307095c8afe0aca44e1c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140248, "uuid": "4571dd37-98a8-4a01-8002-61bfc3b03b18", "value": "T1AEC3124AEF319C1B9F102DB326DA5E8E9C2D7AAB01DBB4A879C1C18F47900CE7D522", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140248, "uuid": "8d04071b-e9f0-44f4-b475-920e328141c8", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ7:p3lOYoaja8xzx/0wsxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717140248, "uuid": "09e0c98d-4800-4e00-b132-dd45e9301934", "value": 120184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140248, "uuid": "64a670e0-9e00-4da9-930a-b541e6eada5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32e10f66-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717140432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140432, "uuid": "9ca1ae0c-ee30-4215-ba8f-ab97bde1dcae", "comment": "Malware payload (RiseProStealer)", "value": "92af1f8423cb9b7a5f08cd752b9c68a7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140432, "uuid": "80cb9e3d-4b77-4483-a0a5-6235344e43b0", "comment": "Malware payload (RiseProStealer)", "value": "9c3aa1b46412046cab893f4bd96d15af2dc425c61c21a90755830d7f4df39cb0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140432, "uuid": "5ab1d2b2-4582-43b0-a99f-471fb913e9dd", "value": "T17BB533199EE8F2BCD8D025F446D39F51FFF906E448C42966990D22BD26DE30EBD489", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140432, "uuid": "378794ab-19eb-44cc-8186-8b7d696ce8fe", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140432, "uuid": "07500c21-1a54-48e1-ada9-66bc74762a3c", "value": "49152:u3cY854MKaOddKQj2u0WSlg+V7FDWSe1B6V1VXRB15:AcROeQl0Hlg+V7FWSe1B6vVX71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717140432, "uuid": "abb6523b-185a-4f0e-92c7-f0259da1abba", "value": 2425344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140432, "uuid": "af376458-6dde-4e04-90ac-e205d27b7ece", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87ad9da9-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717140575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140575, "uuid": "61aff15a-8af3-4242-a8fe-3183e65a55ef", "comment": "Malware payload (RiseProStealer)", "value": "ef44d6ee536659fa0220789f6c6309e9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140575, "uuid": "a59751ec-f61c-467f-a529-e1fd6a8d1768", "comment": "Malware payload (RiseProStealer)", "value": "8a8f7656c9a041292fdc2c602baedfdca58bd25a12564966882ad4fb2b564ecd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140575, "uuid": "b3e7853f-af36-4641-bcc7-77e33d3ca656", "value": "T1D6B5339B6B191AA6C47C08B094D413A674F8768CAD89FA32FD6FBC0C6103F1DED52C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140575, "uuid": "23ecb8c4-e188-4256-9aca-5b69272c6b32", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140575, "uuid": "0b17e138-5878-4dba-adaf-8ccf4ff8846a", "value": "49152:TkmKhyq24kI3qebVaD3cPsHWP17Xnua9A/Yxw7j/Ha7fmAeKVOcyJhuqDO0p:TkmKEqlkAbkD3BWP17eVAy7j/67f0ciS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717140575, "uuid": "6a03fde4-594c-47b6-899d-6079e70b3228", "value": 2348032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140575, "uuid": "a6c77ae8-8fce-48e6-906f-ff436bdf31d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da56b080-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717140713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140713, "uuid": "f8eeb43b-446b-4b9c-aad2-a94ba84b4843", "comment": "Malware payload", "value": "397f7a518424ec324bc4b53cb3877c41", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140713, "uuid": "78cf17f1-153f-4c55-991f-282327dc9091", "comment": "Malware payload", "value": "1e72ab968731c3e9168d034233a071873689a4c757750725b64ba39a208077bf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140713, "uuid": "e587375f-cfcd-422a-816f-c5bb93aabf15", "value": "T139159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140713, "uuid": "7f8a7a1c-2db9-4e4d-954f-d89ece3c4985", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140713, "uuid": "7b4533d0-d29a-42bd-b2d2-0aa3bee73794", "value": "12288:kqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TL:kqDEvCTbMWu7rQYlBQcBiT6rprG8aAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717140713, "uuid": "819ff16b-3165-476c-9bb5-e1af4d65333d", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140713, "uuid": "4a9e46b5-ac93-4ce6-b7ff-0a0efe88b531", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5156f69-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717140758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140758, "uuid": "280f4763-68c2-4c0d-9ede-88d54a7dd03a", "comment": "Malware payload (Amadey)", "value": "7486d9183cdeac8b3d010cc7255cfaf6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140758, "uuid": "6eeb95c3-2149-4035-8a3d-bdc49211e296", "comment": "Malware payload (Amadey)", "value": "17bf21cabf31a52ad1ec0ecf706f040264ff7bdf94796997bffead3dba7d37df", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140758, "uuid": "d2633def-d789-4c3d-b817-126d16809eb2", "value": "T10585335A6E487CA5D529E0332983E63F26F47F8685882DD0170DACEE2F4360651B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140758, "uuid": "6267f656-b3e6-46ab-81b2-2df232067b08", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140758, "uuid": "9c1dc683-5ac2-47b3-a778-bd904bb45cef", "value": "49152:l/yx0VupTDkjN93uyHddKiONEOg866fCHqsyzCqu:lwt9ceyHWi86qCUE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717140758, "uuid": "1dcf9ef0-3f71-4809-af09-8c88143d8d36", "value": 1845248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140758, "uuid": "08735e7f-b3e9-4c15-af84-4e27e5a306a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf5e30a-1f20-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717141144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141144, "uuid": "352cb151-7913-4cc2-b066-5efc5a24857f", "comment": "Malware payload (Socks5Systemz)", "value": "6a129809be76ce045c09e9522771e63b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141144, "uuid": "dd45b5a5-4d45-4294-a97c-5888dd61f97a", "comment": "Malware payload (Socks5Systemz)", "value": "09343b331f59e0d19d4f947460cf34810200ac0abf6a2e56756d936626fdfcba", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141144, "uuid": "df3fc64f-b238-4d83-88fa-85c7bc3e6d57", "value": "T1FE3633012EF259B2E369B8F11E33602DC01E99B698BD3C7D996FA4494683073D7DC3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141144, "uuid": "d12e95fc-fa37-456d-bb1e-9b83a56e3521", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141144, "uuid": "235e1515-ab6e-4d66-91a3-3f87dbdeaa71", "value": "98304:mdsikch91lAIjWEjE6tmVNvlCuAtIzRfPK7o6Bt6XPnrmE9oxjk:z+97A5E4Tnv1Ato64/rmE9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141144, "uuid": "4e0fab0b-e2d5-4180-bafc-0cb2aca3ba1d", "value": 5086800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141144, "uuid": "36b98596-1266-473f-b13c-76bb16059d51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31dd379b-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717141290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141290, "uuid": "f7a8c63a-2368-455a-b498-3d367cb8787a", "comment": "Malware payload", "value": "9dc03b7b3a9f4ecbe1dbe51827e9c716", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141290, "uuid": "0e0fdf66-df9f-414b-a049-de6b0b951c0d", "comment": "Malware payload", "value": "69b2e0863bab17accfeacaf6dcc28e9dd88089ad25eb51e50900dd50405087f7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141290, "uuid": "0c3cf1ea-ddc8-4a7c-b276-d138853e1c8a", "value": "T16D45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141290, "uuid": "30a7c854-fc4b-46d5-b57c-aab4c928b65b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141290, "uuid": "432b0169-56fa-4b6b-b8a3-5236d0b8fd45", "value": "24576:3qDEvCTbMWu7rQYlBQcBiT6rprG8aug2+b+HdiJUX:3TvC/MTQYxsWR7aug2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141290, "uuid": "d0ca2449-07aa-4643-ac18-154ee0fbd6cf", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141290, "uuid": "56e28df3-2ab2-4d00-a036-f6ef73bf25c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406309d8-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717141314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141314, "uuid": "0ff02004-fdf5-400e-958b-1713f647e9a6", "comment": "Malware payload (Amadey)", "value": "a3ddff664e79537cca50adc535e6bcbb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141314, "uuid": "640feb50-23de-4e35-8ffd-f9a629300436", "comment": "Malware payload (Amadey)", "value": "02b57682b9f988b2e52e4b17bd11649f9f33443767cb9ee6d2f8e0c7d6d43594", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141314, "uuid": "c691647e-fcb4-42da-a854-d239a1fc4248", "value": "T11E95333BA87AB9E0C87FC47DC9E9FA816540AB1C04BBD471B04BB7AD977290BC494D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141314, "uuid": "b1452fa9-c0d9-4b8b-a11e-84bc7c6c37f6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141314, "uuid": "c9847770-acaf-453e-98a4-01ce4f8a3ea6", "value": "49152:rGGgJzj/tJH0X/JJFZx3+NVB8Bnbh//fFo+clO+M:rJ03H0vJzuNVEb5/fmTHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141314, "uuid": "a6982c20-3dcc-4ef4-b9de-702f4c2300d1", "value": 1881600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141314, "uuid": "ecad1e89-9dc3-4254-be9b-f5bba6456400", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b50b6633-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "bc058b44-9ac0-4845-9db8-079f989820f7", "comment": "Malware payload (Mirai)", "value": "57010aaf3761b32e3638b24a1d4baf28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "fccba8e2-5447-4dfa-96d6-6e9f4fe64951", "comment": "Malware payload (Mirai)", "value": "0b094998bea9109948fadbb424c4a6003eb623316791cbfd7e4434e4f1b76182", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "4e924a27-dfc7-402b-99d5-437659a14c7b", "value": "T1F043022C914F99B743202870EE387501894D6779E7FA2167C126DEF852AF3407E6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "a83621f2-6fdd-41f1-a784-18bd0e773004", "value": "1536:mXtvNUpmXT2d0yQz4gUWL8K7I8vHvbsGasaD:SbUTd0yMnUWLR/X4GRaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141510, "uuid": "cb3be35d-7e1b-42f3-b6f5-fe79c86496f5", "value": 57932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "85fea68a-5820-43fa-bca4-e502bc9557ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "48cf8cb3-4dea-44f3-865c-c045d22576af", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b53a0eee-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "1749bf4c-15b8-494a-8864-8778c3a97283", "comment": "Malware payload (Mirai)", "value": "4f64c9537f162d11be5616c20a5d3259", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "942c8364-cfc6-4dc2-aa1c-ea8f03c617a0", "comment": "Malware payload (Mirai)", "value": "f80ad1132f6169f79a000d57c04e4f80e48ae9ceebf8a594714bd0d300370121", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "524c60f8-2b8d-447a-9487-41bb02f340e2", "value": "T1DEE2E14EE8A83AAAC0BD5DFCA0BE51554B09B155AADD877473004ECE33F52D271E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "f9eb8e48-047a-40ee-b4a2-c3b9e18e14da", "value": "768:XgXGxmZtRnI5lFLpyNFVApaHCfyusyrWa:Q2xmZrQZsFVAYHCfy8j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141510, "uuid": "b3e56107-5f34-4f74-b13a-303f453c4e31", "value": 33740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "597199f4-1215-489b-beac-6cf36e0630d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b54c317f-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "ed3d165a-24d3-4621-a155-865f3299f236", "comment": "Malware payload (Mirai)", "value": "6806c00652ed403e5f2709da3ff604e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "801f5ab4-f3a8-4315-bb91-695e46e25c76", "comment": "Malware payload (Mirai)", "value": "d0ba38a81fc31bb164d1e2746fbfbe0ff0a737026b36f653fb20983e5cdfedc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "b7bb7e62-3bc2-4890-bc5e-7691a8a1a33b", "value": "T14CE2E09457073C32C23504704D2CC984B3AE5E9EE4EA787A48126C98F7D3B1E29B9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "b71dc137-b5f5-40fc-9900-4c70c11f6ef6", "value": "768:w+9RflyCBse6vsK+5QX0XhT2xfs8iXs3UozVd:L9RbsLUPQX0RStiKzVd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141510, "uuid": "70b4def9-02dc-496d-850c-8fd8831205b2", "value": 31824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "73b0529e-6b81-4e4e-abd0-29e456827aea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141510, "uuid": "29a31fd9-adc8-4070-ace5-3e4482d9b292", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b588cf69-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "7e5648f9-6a68-4b40-8814-acf93f09452c", "comment": "Malware payload (Mirai)", "value": "09ba787f7ccf85ceb29a401eddb1ce04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "c25c0cfb-b4a0-4f51-8b7a-d01a2330a91a", "comment": "Malware payload (Mirai)", "value": "430f158d155ee04ba62c5bbe2845d5a8b19afd194aa8ddb10a69bb0c2b819449", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "982752b7-91eb-4464-90aa-66a4d0ba6d4c", "value": "T169D2F18C318C5600E80846BB73DD7C8FA2291EF9D74ABB40EA4B1F91562723CCB7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "63d9f186-d0b4-4ae9-b3e3-c60a1e0579a2", "value": "384:MM8HrPrrTmwuMXRU6Owh3It48nZICaafEA5h9MZAJhXs5OmgPUr0vXxVNVqo3MY6:qnSWRcKmMAKMhoO7Pukq8MYQJtiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "ada8d912-e09c-492c-8d95-a808c606d1f9", "value": 30348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "b201012b-99eb-4990-b078-364ee51b0cb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "4be58e74-fb04-4bcd-8d81-968d986babfe", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5c37ec3-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "77dd2e76-e9d9-476d-a622-fa2f69bb0aad", "comment": "Malware payload (Mirai)", "value": "ec3bb5b6d0b725f268efd1ddad50f84b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "fbbf58fc-3d4f-44c2-af9f-df1c1c505c61", "comment": "Malware payload (Mirai)", "value": "b1e42222727d6a216e00e3de58e286f9c8cad083e40027fcafdae7182d6289c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "f1395ada-3d55-498e-9198-7fc90bd92b30", "value": "T105F2F119DF1878F6C6FA1D75A1200E6A058B03BDE0F73C734A89DBC1A9E06634FA95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "c8844196-aa08-4d6c-97dd-6aad31fb8e84", "value": "768:A/gmt53nMeu9kgDWAFgepPjDOaRx0UHNVabSvaCu9q3UELwd:A/gmt5nMeu9k0Hvj1uiN8rCTLO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "e4c9dfb9-f55c-4ea4-9e47-4e20f670c6d9", "value": 37036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "b8c7781e-322c-4d23-aa51-4d9eae44c4b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "d896ee0a-c4ce-4e47-9793-2816d48dc42b", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5ca54b6-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "45839e23-646e-4536-af95-4d5f2bd0cb1a", "comment": "Malware payload (Mirai)", "value": "3aa16e4417c8345950f20f0c4b0cff14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "db3d640e-89e6-4889-a7e1-c5003e864b6b", "comment": "Malware payload (Mirai)", "value": "f5b258bcacf1a8bf3cbd064c6490dc212ee8474396aa6ae969524fb8ffe9ba90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "7dcde33d-df26-4ee8-9050-6ac7f9de4af6", "value": "T186E2E1AD6B0900E6CE37D43E08F54B6219B06EB98B42DD2BE145A4E3958747AB40F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "f976b08c-783b-443c-9c70-a4d78d946548", "value": "768:muAQgVZNXnU72BxMCxRCV6M5l/1oCuxbF91eJgGlzDpbuR1J6:TAQ6XU7eMCgdreCux0VJuE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "f03a6892-dc9a-4538-83cd-65c77afe6fbf", "value": 32972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "08dc14a1-ac91-4804-bed4-005ac517540d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5ddf4ee-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "843f0d23-bb5b-4606-ab67-bfae5992853e", "comment": "Malware payload", "value": "983e0217f3152e4f3b48ad4f302bdd93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "d48a6b88-b325-4c8c-80d6-f811b81a8251", "comment": "Malware payload", "value": "bd40ba2e4f47411b0a074920f52053a03b201687f9ddeff959082bbfb77c607f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "6f1d9da4-fd57-48b6-bbd1-109274609139", "value": "T17ED2D068E06DAE93F8BD9DB06D6586C836E3CF8D3252CDF19059ABA20491047B445F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "ba29ff7a-585d-4be5-90d4-c9179f9b174e", "value": "768:o0ue2HnzYCMAZVBPR4TznYfly594uVcqgw090:o0uxrZVxR43EK4u+qgw090", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "e4bdc6bb-43b0-459e-ab8f-3b82ec8b1c0f", "value": 30040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "6287088d-f8ac-4eea-b34c-1153ac104672", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5e31354-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "6c964ad2-9577-4a17-9345-d74d1b69f7c2", "comment": "Malware payload (Mirai)", "value": "5c007ae387f4fc8ba5a94fa90c5cd679", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "41754fcf-c5a0-40bb-b842-1846a096cdd6", "comment": "Malware payload (Mirai)", "value": "72822799b35742b10ffc4bc86a726536b1dba35ad9ca17ae21722e36d1967a78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "ac032c51-2802-4dee-ade4-d4a97a407a28", "value": "T1ADD2E013C49F2071E8650D77D71C4943231C0BAEA5FAB0BD2509DAD8F624A4A46FA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "794ab304-57e6-4b4c-9579-41693f168fdc", "value": "768:Tdlwcl5G/ZGUOpSAW1PE9qeoLf9e+L4dZGSfqs3Uozu:ooUxWxWLdSlnzu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "26062ad4-ee4d-43d4-9388-f491de7899b8", "value": 30336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "0de47c5b-46a0-4f87-9767-55c38198d4f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "99eed794-6d9a-474a-932f-5dcfa882bb0d", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5f48c5f-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "3b0952ac-174b-4d57-b7df-b0d0286fbf0d", "comment": "Malware payload (Mirai)", "value": "012001682b089cd79690e99c703ca1f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "0d6559b7-77f1-4d1e-b817-666cc7d03775", "comment": "Malware payload (Mirai)", "value": "b22b4fb4f24eb12d929fb529254bfa6735eec6114b8f700e69eb7382cb2ef8a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "bbcb2d93-909e-46b6-bd45-a04c25468b5f", "value": "T12F632AEAF800DD7CF80AEB7B4467090BB530E39155920B36A76FFD43AC721A45927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "a9ff163c-a52e-409b-a832-35c43fa24185", "value": "1536:SmhhuYmCu1WtcOnHRue9Ag7k8A8L/3xLADSzmOq7f6NHskw:SfAPnHRuTg7k8Jy2yBxkw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141511, "uuid": "8c3e9836-0a1a-41e5-a6c7-cdc048d9b75d", "value": 68124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141511, "uuid": "0d100cf8-8d24-4c98-8f7e-e9716d0b7834", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6207edd-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717141512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141512, "uuid": "8694cde1-1bf7-410f-b8ad-5f608493f03e", "comment": "Malware payload (Mirai)", "value": "28c2d7dc6e4621bb93114d3981700169", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141512, "uuid": "80ce5ccc-693d-484e-af36-61b74326ef8b", "comment": "Malware payload (Mirai)", "value": "b0a976b1daaa1bb931a5a57bcb704dce3266efe19fb15486140e2b4c3dc1bca3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141512, "uuid": "11cdfb0e-f50b-4357-88e1-63378221d903", "value": "T1D343BF66C4382D9CC19989B4B9328E356723E41C46932EBA56A7C67D8003FFCF5093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141512, "uuid": "2e729312-e1e8-4769-90c2-d716ef345946", "value": "1536:za3AWtmScvHLNiWsQwqUyPKMvfG4hch+Cg0IADX:zOOrN2qUySMLch+AvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141512, "uuid": "bfb1d415-38fc-4245-aa65-140964951333", "value": 58676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141512, "uuid": "d20246cd-1256-4b2a-8e99-0a2248986d39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "199094c1-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717141679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141679, "uuid": "c5e9c89a-58e8-4d94-993b-115b7fac2124", "comment": "Malware payload (GCleaner)", "value": "994642bd6caea92f34ea1ad60561b303", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141679, "uuid": "4fd4ec2a-0fbe-4b15-b7b1-d0fe920fb6d0", "comment": "Malware payload (GCleaner)", "value": "2251446c7de661739df0ba10f329b57e97ec1bdf8fac13a95f0b8514ae4f92b9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141679, "uuid": "a5fb1e30-f20c-49da-aeae-d8ba63f1a5c7", "value": "T14B649E43A6F1BD11D5664B339E2FCAE8332EFD705E1577566218BB2F18B11A1CA233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141679, "uuid": "d595f313-e35a-44cd-8917-76fba3dd468f", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141679, "uuid": "ba6ea12d-026a-4c40-aedb-423b3fabe56a", "value": "3072:yCGvI9Os/9inrmaRQGjLxbZdRSQ3jCWQRKQ+0VLjIVjZ6nl/BUP/Xrz5gfwOfwbh:yu/kqaqGjL/6WQsih8z6n/wfh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141679, "uuid": "22acdbac-7b8c-4361-918f-a828a6464ff3", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141679, "uuid": "2f9f4e46-b321-4769-b02a-b5a5eea32796", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42fccde6-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717141748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141748, "uuid": "3fe76e78-6b80-426a-ba8e-ccfebcf23b1d", "comment": "Malware payload", "value": "a3f751a4b3b4ceb221cbb46881bfcd7f", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141748, "uuid": "f3fae939-f05c-418a-973b-6ea09891fb63", "comment": "Malware payload", "value": "5972ef29d9016a0a6f760ff37ef9c9149213458f62085352901d7a7137682144", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141748, "uuid": "c66e650b-1154-444f-b9df-56ec02d8beb1", "value": "T139B533209F8DC576D453919EDBB426840BE3C12CA2F5273421D13D1AD7CB8DBE862D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141748, "uuid": "0609994b-8e1a-4cae-93dc-98ee89d4d77f", "value": "49152:MwLh/8AcA76zRsgCkJrRC1aI5Lwwz6kQfdoZZho:xVVEXJroaI+wzOYZy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141748, "uuid": "9acd58a0-f7f5-4805-9e9c-52880138c0e4", "value": 2270224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141748, "uuid": "06727a7e-0f4c-455a-9699-918487f4cffc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "450417f2-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717141751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141751, "uuid": "b123b556-7f2f-4b97-bcd0-5d52e1f3a0c8", "comment": "Malware payload", "value": "2c0c3d560939bea8c600c56d1bf5eb75", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141751, "uuid": "cc6355d6-8e66-4f22-bb06-ed126664c6b5", "comment": "Malware payload", "value": "db9ed8779fd97fbb5a4b0fbbe410e279835b9bfb52954cb31248822381b66175", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141751, "uuid": "9f473c19-0ae6-4586-b48f-e8f8ae654aaf", "value": "T1DDB5339BC21561F018F85946955DAEB61D9AA70153A0BCD2CB7037043F2CF5A8EBE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141751, "uuid": "13229df8-424b-40f4-828c-736e7a6af03c", "value": "49152:U6v2LBLZVLBVGmVqweo7rqKPQxmryBNaPs13LYcu:U6v2LBLfz0wP72KPvyBPLhu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141751, "uuid": "352c3426-ccbb-4c27-a3fd-c8b449d15ace", "value": 2271248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141751, "uuid": "d811f23b-15d6-43b9-9f49-d51a073386cb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46cc5365-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717141754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141754, "uuid": "036ce0a2-4443-4cec-80eb-8b5e2e2e7bc3", "comment": "Malware payload", "value": "dc89f8112d296b468c596ffbd4e166b7", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141754, "uuid": "692f2c33-49d7-4f1f-92e5-5003ce3cd725", "comment": "Malware payload", "value": "c3efaa2158ef2a7688820d7d896f71435190957ff32fab26fe8e99ca185b03ae", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141754, "uuid": "29d474cc-1f64-4000-a706-e39a8eab75a4", "value": "T17BB533B21F95FA4A343289084781FDFEA12D509342571769CAF5608E4E28ED1DE7FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141754, "uuid": "861645c2-1e22-4362-b2b1-a2fea3d79569", "value": "49152:DvBRLdT0/jSl4yl/9D1aQzknnCPZh5vOTfoQBAjIurwyVHlKvzk:D7LWbkZ9DQQWCPLNGwQMkO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717141754, "uuid": "be31de09-e132-4ccb-b545-8e55287f57ed", "value": 2275344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141754, "uuid": "fd9716b8-a5b4-4e39-b353-842e81e20d6c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50a15a34-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717142200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142200, "uuid": "84aa0fbf-bb57-45a4-bdd6-2aafa1ab0a5d", "comment": "Malware payload", "value": "fc3a4bf48158c2fc46b02e9cf2e0c5a0", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142200, "uuid": "dc0c2c91-7bf1-4d40-adcc-4366fa2ca4a5", "comment": "Malware payload", "value": "28ac9522e5ae595e3298ea60fc38d4d0d6e88e9fe9d0465ce50a4daab83f7641", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142200, "uuid": "78319afa-a4d1-448c-bebd-bf0d6333fd3c", "value": "T134E53381A14FDEDD5A70D9AF12F82B90F568C987F8B4D601C32FA2D6C39727348952", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142200, "uuid": "955c386a-6c77-4cf1-aa7c-a5604c13180b", "value": "49152:QddqfjuPO4skhCYl31cvEqGCAIlWF9g4bmHkxz4eF1xw5uTl7UYcltUMCcGwJeG:WEuPxJluaC/lKb6dsblLwZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717142200, "uuid": "427f712b-0bb5-4fad-a19e-254acb0647a1", "value": 3046416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142200, "uuid": "963672a9-3c32-4796-8fd4-7aee68a4232d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a71b3b00-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717142345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142345, "uuid": "c126a3f3-7cf2-4d09-b1c8-456f0c0729e3", "comment": "Malware payload", "value": "19b9de641a480be1236dd9712d9ccc10", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142345, "uuid": "9eb562cd-5ed1-477b-91e8-445540ee2cb6", "comment": "Malware payload", "value": "c558e126c64a89887115a45276d5a8751f90c399eb32ca103f6e50901abc7abd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142345, "uuid": "c15c7b84-02aa-4b71-80cb-85c583594136", "value": "T15F75230139D48072D5633A350DF2A6B54A3FF8710B266E9FA3941F7B8F74582D321A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142345, "uuid": "73f12b52-e482-4449-a220-cb736183caeb", "value": "fec98778e46bf1d6aed3f9ad74a5bb8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142345, "uuid": "f3786c75-a9c3-4f2a-acb2-3212e9f13d45", "value": "49152:LzL+zEqvftsAyChHQTTu7XIP+WQ55KGRK04TYS:LzLYVdiCh6Cdb7RD4T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717142345, "uuid": "1bcecd83-d4d5-4347-9ba1-917de87e4ef2", "value": 1646592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142345, "uuid": "8d7ee156-f748-4629-bae8-45abc9899937", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f20c8fad-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717142901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142901, "uuid": "565363b4-b15a-4eb8-b892-5cdf3ad4f5bf", "comment": "Malware payload (GCleaner)", "value": "84e7ea8bec4af1b0663518d27b92b100", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142901, "uuid": "0562e407-6054-4331-a38f-c555738c88ab", "comment": "Malware payload (GCleaner)", "value": "d96629066bc0ff64b20f2ce7aebe337f0853b459cf61e9382b4326c8efa3a9d5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142901, "uuid": "73025e3d-aa5c-472a-8da6-3d450bd523fb", "value": "T10C548E0256E1BC44E9E68E728E1ECAE8331FF8B18F4567662D0C6A1F34B1161C56F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142901, "uuid": "d6c34b1f-bfea-435a-a95f-dc5e8ee6c043", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142901, "uuid": "43c6271a-86e4-42f0-a79a-707304d9d4fa", "value": "3072:Ct8LntCaAHcByCST1/aGJBKzXRXafNcJBFEaO05F3/3eh:C+BZAHZC7GaAfNcvkgvuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717142901, "uuid": "bfd0d10c-b852-43f4-b513-b8790607b031", "value": 281088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142901, "uuid": "1d1603b0-e53d-4bcb-b017-02f3b97e0c7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c9f3315-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717142945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142945, "uuid": "db15f523-bdb0-4144-9f1a-5c171d2f73a5", "comment": "Malware payload", "value": "149d16584c5b7bdfbbec25902c2b530b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142945, "uuid": "bee73f7d-e520-4a60-a82e-936b07c58430", "comment": "Malware payload", "value": "0017857966a3aa40e96b00f59ff042e0e8d659b617058ef89ddb3e06e10ec5e0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142945, "uuid": "caf7b89e-4727-49a2-832d-1bea80227513", "value": "T15C313FDD7921CF386B2D483DB9C2208CA543D67B882A9EA0B042B42D3D5C3A47169F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142945, "uuid": "d7221052-903f-4fd4-adc3-4fe2d9d588a2", "value": "24:oz2zyLN41AJ83j5UqfhhrLZO1B/5NtZl0QpPpzvzYDYc7QW:oyWLTCxfyDTl06pz7Y6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717142945, "uuid": "3cee7a89-c658-45cc-a647-3b117ae4a1a6", "value": 1594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142945, "uuid": "667ada5b-cf9a-4b78-9e51-48d8646d8ee5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d6b307a-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717142947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142947, "uuid": "5a1bd89f-78db-4cdd-87a6-c73850fc0bc2", "comment": "Malware payload", "value": "6fd5b991c985e807a1e46cba0bed3d67", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142947, "uuid": "fab0ecc4-9af1-4aa5-98bc-a4ee04afafcf", "comment": "Malware payload", "value": "e05a75c9a94e937c5e7def4f0e1d4427055a3826f8f56899ca26a63d0bdfd816", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142947, "uuid": "9d1c6f53-05a0-4831-b411-d2a6bd406490", "value": "T11F036B89E78F44A1CF54A67B422B0A8984FCBB3EB70101B574AC937437EEC2D51A59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142947, "uuid": "99b24bc6-2416-45b3-992f-4718ae97c9ff", "value": "768:GP9h59+6saoNoie8UulygCcgZI5QA3+grC:GBrsVxe8UAUZ6Z+grC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717142947, "uuid": "405b787c-2d36-4778-b73b-a0c1e7f014c0", "value": 40797, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142947, "uuid": "0ae819a0-ede9-40bb-a513-75f3ef09d912", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3712eb3f-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717143017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "3cc92415-70f7-4169-8660-c8bda7a15cc8", "comment": "Malware payload", "value": "f0b540d812d45a28081889519b9c9574", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "c308b09d-e360-4f02-85b4-8f25bee6a1ac", "comment": "Malware payload", "value": "f902b6c7232166c4e07e761f780aa9f5a74542dd92c66a3a53d5e7fd082e767d", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "0dbf5fc9-5a51-4a7d-9b29-a077fd53fb48", "value": "T19D330412A7FA0108F6F36B48693A56344E77BD9AAC7DCA4C499C154D1BF3E44CC24B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "6fb86d27-b1d3-4d1e-8066-03ee405fc1e3", "value": "768:OtkFIo1c/3aH6aoczi3IHV00tgjJ2RNrSpOrtlcWCdCZ:ikFIo1c/3aH6aq3IHVoVOrtOcZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717143017, "uuid": "85f37360-5dee-426a-9d02-ca44c3865c41", "value": 50226, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "51112d5b-7633-4567-b284-124097409c70", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9be7687a-1869-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1717143017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "d048d5a9-464a-4e37-8ab9-fa584f9f5a23", "comment": "Malware payload (RemcosRAT)", "value": "9216b309fa40403cfc6990e9f9f76cc4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "97ec82c2-870d-4413-8d88-fc6a16bcd86a", "comment": "Malware payload (RemcosRAT)", "value": "d4367c609f5dbfd372f292f11d4ae5e9638f588c70bba3bb92209e7ce6b766d4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "dbabdfe9-6e75-475b-a3a3-6aa787896ce7", "value": "T130E4B0B99295AC9F0E1D0D62F408174A5C6C44D7F678C2F87E82B4F896961A04FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "75c680b6-6244-470e-ae8b-e2a87e9b6395", "value": "12288:0fULWw+8Uizqo36P+F9QFojBXC2slenIFHrg+j3VS9:a0lRzqoKP3ojBXC2ienIFLNjl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717143017, "uuid": "5ba58474-04aa-4915-b2c9-3a67656a491e", "value": 658776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143017, "uuid": "9f26ecbf-90bc-463d-b1cf-1e83e4d86f18", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b0a6d7-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717143704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143704, "uuid": "746a7805-9666-4967-9784-918e26ce5cd0", "comment": "Malware payload", "value": "c074ca9beae64efa763a3b08e4c43d75", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143704, "uuid": "db9cbeb5-6183-40c0-8190-0118a64b2f19", "comment": "Malware payload", "value": "916192260694ea236dfd5bb0a34cb5365ea3ae4d519ea76757a3089e1eb7e2e8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143704, "uuid": "7e68569e-9998-4166-93ba-fe1a8794ee47", "value": "T1EC74C0F2A2E1BD54E5578E728F2EC9E87E1EF9B38E89336621186A1F04701F1C1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143704, "uuid": "47945ecb-864c-4873-9994-c355d75f9018", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143704, "uuid": "c8210a7d-71b1-414e-9718-b9d8206a4924", "value": "6144:rTGhajnCGg9ewiEvpwTcOVBbo3RIXO0AsrYCh:rTISnCTiEvCcW5yD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717143704, "uuid": "b05a6a86-bc5b-423d-acad-c9c5073086ca", "value": 351744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143704, "uuid": "ce606c5d-6b89-48c3-9022-007646810812", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42b5e96f-1f27-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717143895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143895, "uuid": "234061bd-e5b2-4b4a-9421-9e5cd08cba5d", "comment": "Malware payload (Stealc)", "value": "a50f3801e37692d4cc224a8a65404b4f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143895, "uuid": "8859da0f-26b9-4af9-a631-2a5ee1dc499c", "comment": "Malware payload (Stealc)", "value": "843a2a75cfa03dfbcab75a497e28d1fa007f52a7ee0fd7d2694b3f17d2245e54", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143895, "uuid": "fd9d8c02-9dfb-4099-aeb1-fdf5b5e5e11c", "value": "T19C447E6396E1BC54E52B8E7E8E2FCAE4762EF9B04F45676B2118AE1F0C711B1C1237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143895, "uuid": "4fa1bfb3-a7be-41c5-ad67-f107dd6a8305", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143895, "uuid": "31858494-a2ac-4533-9d32-8fb94acb3e7f", "value": "3072:FHrScM8tFaDCg6RV9UA4KzV9Amg8UScnLcO5hJ5VJ50h:FHri81RrUA4wV9AoUXw0puh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717143895, "uuid": "84c39da4-9485-45ff-a9e2-9415f87facf5", "value": 254464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143895, "uuid": "30a43c09-2b52-4569-b15d-d0ad0e887753", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ea7543-1f27-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717143926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143926, "uuid": "a59f172d-1de0-40bc-a1e9-4b4bf03c61b5", "comment": "Malware payload", "value": "d15bf6ebc10b23462ea2da6638a213c1", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143926, "uuid": "a96e75f4-3b41-4333-beba-298a0716f4b4", "comment": "Malware payload", "value": "792d568065d8b0decb0564f6215844bd43815a7b5d39c902a296427d38149704", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143926, "uuid": "6c8eabab-b1d8-4040-8839-c7fa18fd71db", "value": "T10416F003FB85CAA7C9BA83F06B770DA92E134F14C6529AE754117A7E2E771C10DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143926, "uuid": "9dda917b-ed84-472d-ae6f-578285079ed2", "value": "98304:w9+J/vdcKatLodwwV3OV41bvmz6zBQkRTi0t9VuIoH+L:EiILLNK+zmhfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717143926, "uuid": "dee0da44-6f62-4a60-abfb-34687071a0fa", "value": 4297049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143926, "uuid": "5d002196-88ea-4e5e-be23-daf32bc2aacb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcc483c5-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717145388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145388, "uuid": "d69b2522-b141-47cc-b521-2bdbc5aaf84b", "comment": "Malware payload (Amadey)", "value": "9f36df7ccec1c2a5c193645b8dc8c8d1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145388, "uuid": "d84ab6ee-5feb-44c6-a0e3-97ad4470eb1e", "comment": "Malware payload (Amadey)", "value": "858981d3c12bbc19a5b4070228697475caf6ffb4a1099105fcdbfd1c3230f787", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145388, "uuid": "625c4a5e-89a6-4565-bb56-4f8436110952", "value": "T15F9533510B010A33D5052DB3A2572BA06F5E58DE2BB17BE54B558133CCAAB3BFF514", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145388, "uuid": "b8a952e7-16be-4103-bdaa-a0af60a3c691", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145388, "uuid": "d7aedf89-c3fb-4768-b3e7-311f1737551e", "value": "24576:2xyMIWRtyIYpZRzcxGzpGXIGI0egIdz/62bYvArstDkwp13ufx0ar7KFxSA1:GIDpZR65Ymyz/UvArsh71efduzSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717145388, "uuid": "56fa9548-22fc-4fce-8398-e30c3c79acb9", "value": 1892864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145388, "uuid": "8ef6f841-b7cb-4b2b-833a-b457ca25d9dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07e554d2-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717145514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145514, "uuid": "1d12d0d8-ee13-4b9c-9783-4961e2418618", "comment": "Malware payload", "value": "de86ffceccb32161bba3d58b08a8a2a6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145514, "uuid": "5eece61e-19b4-480c-9927-5dc5ea99618d", "comment": "Malware payload", "value": "a143b24fdbe3ad986d9f3fe40568cef6832c4263329c4dcd6c1f87e8552cf640", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145514, "uuid": "659b3c97-016a-4f56-a1ac-7b4bc859801a", "value": "T122B5334A0424CD9ECEA5E574E193CAD66F52BB38B87FF0524D8D09CC923356D2B688", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145514, "uuid": "aebd1325-10df-4f50-adf6-29ebb5c790f4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145514, "uuid": "386bbb11-113f-479e-a63b-516512546ead", "value": "49152:KC+P8MUJR3NHdWqqritcDLeMbRibBLHymbvkE:K/IfqEcDvSBzy+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717145514, "uuid": "270fb3f1-4af7-4f21-9662-8963aeb6f456", "value": 2425856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145514, "uuid": "ca49e193-4d04-47c9-ad39-ae8499f75e18", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54b9a1d2-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717145643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145643, "uuid": "809d7cdb-7913-4f82-8fa9-e5175235916c", "comment": "Malware payload (Amadey)", "value": "62a03947628e3db7306536f3fc8d44ac", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145643, "uuid": "59d278fb-24e2-4f58-b0fc-7486f5f074e2", "comment": "Malware payload (Amadey)", "value": "537b79cce7bdd08c246d9f1bf7d2719c42ade1ee145d23bfb0bd0a561c649935", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145643, "uuid": "81f20723-6d92-4ab0-9fac-b23c62d48889", "value": "T14595334C77254CB5E49B7BF9964FE89CCDE6171172786A8A2B02BAC3C0F563AC641C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145643, "uuid": "2d2d6228-fab8-4d5d-a804-672d2e8b5329", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145643, "uuid": "26557fb8-2bd0-438b-ae9c-c6cec6ceb59e", "value": "49152:0PSYLuHTWjHhMFWKNdPnvCXlaUGFZe/x3Yx+:by6IKN9vCUxDe/x3Yx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717145643, "uuid": "b5a41c10-68ec-4798-bfa0-93968f4d5d3d", "value": 1878016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145643, "uuid": "baa57d35-8cc7-4469-af2a-e2b0b42ac348", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76e13734-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717145701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145701, "uuid": "bbe622d4-bbea-448e-a4f3-96a8e094fe0b", "comment": "Malware payload", "value": "08304813ca77af9575105c76cb27699a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145701, "uuid": "13d5c956-2387-418e-9c0c-20263c9e4f04", "comment": "Malware payload", "value": "f889e52061c953074ebb95952e205701b4691f93cae60962650ffcaebdf7448d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145701, "uuid": "601cf4d9-e85a-4cec-aa97-a6689b092704", "value": "T1AE159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145701, "uuid": "37717204-f945-447b-bc94-4eed5268b9d7", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145701, "uuid": "bd2210cc-de96-4569-ac74-ee37d9933a99", "value": "12288:5qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TX:5qDEvCTbMWu7rQYlBQcBiT6rprG8aAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717145701, "uuid": "c27a1787-ab0f-4b1f-8b5e-148573628496", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145701, "uuid": "5a5c263b-b71a-4f4c-8437-f06ffca3f867", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3c4eae6-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717145803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145803, "uuid": "03d6683c-5448-48c0-9755-d86f1a787111", "comment": "Malware payload (RiseProStealer)", "value": "83c13a57e0e9050a0386e0b5c81ec6a3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145803, "uuid": "29fff638-8a43-43e8-9a4a-68f9d7d747de", "comment": "Malware payload (RiseProStealer)", "value": "d76868bedd394d38662083612913a7324aad0bf4f26285bc9de860837c777443", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145803, "uuid": "22c70c4c-58ec-4098-9023-689865fdf067", "value": "T1EDB533B2DE185519CDFC3835A0D0927913D6E83ACF1E6232395F96661CB3B9E31D28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145803, "uuid": "12dd1ae8-f314-45a0-8c3f-ab151321caaa", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145803, "uuid": "15670cc8-72c9-4ad2-87e1-0314d1683976", "value": "49152:5kmKhyq24kI3qebVaEND1/cKYi5QY5dIV2gErbb3E5J4HF:5kmKEqlkAbkEVyFi5QY5d2hSyJ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717145803, "uuid": "f83288d7-e6e3-4908-8752-f26e1860fd33", "value": 2388992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145803, "uuid": "1668bc68-de51-4880-83cb-80e45dd2f945", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0559d810-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717146369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146369, "uuid": "2852619a-3103-4d94-b223-87888390bbc1", "comment": "Malware payload (RiseProStealer)", "value": "d86ff3c02aefcd74ece7eb45ee226806", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146369, "uuid": "8a229d64-bda6-4cac-bde8-0a69b276de61", "comment": "Malware payload (RiseProStealer)", "value": "cb67a188bafea0fd5f5e9725881c88a1c494763c094f76df73914bd8cadce170", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146369, "uuid": "dc6358d4-e06d-465e-bd1b-19c3713ad2e2", "value": "T185C52350B5418433C1B3263A55F28EF86F3E79710E94BA9FF380AB7B0F312919664A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146369, "uuid": "6e926bce-5d2c-463d-b51e-092543716a65", "value": "fec98778e46bf1d6aed3f9ad74a5bb8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146369, "uuid": "9992765b-1946-42b4-bebf-1ff38cf8b0f3", "value": "49152:dI1+AV/nH+LZTiRDmIzov0aEEWXr/m0ce6XjX04LbfQyXhZzByPfP11X/RaPWJhq:dI1+Q/HgliRD1C0a925ceIjX/bfQyXzg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717146369, "uuid": "fd07ca67-c4df-4484-8cf2-7a40f0e0e988", "value": 2680832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146369, "uuid": "8afdb93b-1fc6-4c7b-95bb-9d427ffcaa05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7993236b-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1717146564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146564, "uuid": "60f8d6ba-dc33-43b7-9f9c-bdb10111335a", "comment": "Malware payload (Blackmoon)", "value": "ff376ee6a7b2fd3d1fbb5ef16ba01362", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146564, "uuid": "91d836ea-eec5-4c24-987f-6a137668771c", "comment": "Malware payload (Blackmoon)", "value": "b62d30382b901a3875004e30cece3191659bd5d7c3bafbbd3ba6120e15478aab", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146564, "uuid": "f10434ec-2308-4e85-bcda-a99ee7a28da0", "value": "T114355D23E120C853E15516B22DEA0B3C6DB9937118B58E43FBC8CDF5BEA16329F5A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146564, "uuid": "a9880597-2028-4d44-a93f-349584beec68", "value": "cf80ca126980129144154807c72c9042", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146564, "uuid": "75f14dbd-dda3-484c-aa14-1506de4e3f10", "value": "24576:1BvI28fv4MONQyNGUcRgV2kJN0XdUP6G7n6nL2aXFRWgM3bw:1BvI28fvuGfmNgRWgM3bw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717146564, "uuid": "c9b78cff-059d-4731-80cb-c2727ae5ea66", "value": 1140736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146564, "uuid": "7ea88817-ad21-4a89-82af-0b63e73d83fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c4ef91-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717146590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146590, "uuid": "2375bf91-eea5-4334-b0fe-2f45f42243c1", "comment": "Malware payload (Stealc)", "value": "c8649fa4164ec171b5ab5e4bf99605a3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146590, "uuid": "5b3b9095-6950-45a9-92f3-19afbe8d6fa1", "comment": "Malware payload (Stealc)", "value": "58d1d05585eafcc3e26274ec14a688647233c18df08aa64847c05cb209201c80", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146590, "uuid": "75e5f39c-cc46-49a5-8aaa-7b06e6754c4e", "value": "T193A5CF2FB1A38836D1F21A3D9C6B5764452EBA133D38FD473AF41A485A3714235392", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146590, "uuid": "dd2d4ed9-efd9-4ed8-8e18-a3c933e60412", "value": "cae8b2edc1c679683c46d68fb690a033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146590, "uuid": "b40c919a-d173-4b08-9c85-4a38c7da5502", "value": "49152:eqtdPVosJEkz/+VHA58ljrIY+96lJS9bZ:e6d9fJ1c7jvedZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717146590, "uuid": "3dacd87a-3307-4540-9e4d-d451eff355a6", "value": 2149376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146590, "uuid": "89da2b1b-8902-4163-8b4d-bc12fb5f75a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1692ea1a-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717146827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146827, "uuid": "d1ad58de-b6be-40ca-bbf4-93d4163506e7", "comment": "Malware payload", "value": "4758eaa73f7e8fa044c32a8f236b87c0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146827, "uuid": "8e68eaf7-0cad-455f-b997-68dfac51075c", "comment": "Malware payload", "value": "042d9b4d0ee3f5ccee0841599f5534f718c71ad6a6afcc2990cebb17a045c20b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146827, "uuid": "9c1c7bbc-6026-4c60-b64d-d336d7176882", "value": "T16E45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146827, "uuid": "ae2b3887-91ad-4663-9aba-a907bd5c6870", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146827, "uuid": "9f7ed6ec-38e2-4696-8555-84eba4373e99", "value": "24576:jqDEvCTbMWu7rQYlBQcBiT6rprG8auy2+b+HdiJUX:jTvC/MTQYxsWR7auy2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717146827, "uuid": "026c89f8-3737-40d6-a12a-0394d6626abf", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146827, "uuid": "cc0bb737-18f9-4d5a-8ed1-ed627f1e3a39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717146851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146851, "uuid": "719f01c1-6df2-448a-841e-056bec751049", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146851, "uuid": "09c66582-7845-4190-8cf7-4e91c660912d", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146851, "uuid": "564bb9f3-12c1-4125-b772-38f2d0ce3d82", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146851, "uuid": "8ceeb639-bf9c-41fd-953e-00cd00619b21", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717146851, "uuid": "09c601e7-a468-43f8-b44f-d07aa7af1ff5", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717147160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147160, "uuid": "dd657316-39b1-496c-8f53-7fd4f625f992", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147160, "uuid": "271221b7-f943-41a7-9571-60b1bf770c3c", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147160, "uuid": "7a483990-4254-4892-9978-3cc6ea2b3a6f", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147160, "uuid": "42da940e-f640-4459-a1e6-95487f9f650e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717147160, "uuid": "8d568012-c3c5-404e-8f46-a1f67510835c", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717147279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147279, "uuid": "86d91782-cfd6-4491-8b1a-4edc918df6f1", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147279, "uuid": "a448b7c8-ce6d-4ccf-b944-2e058e1e2033", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147279, "uuid": "81f2f289-c497-446b-ac34-6977fe0b0cf5", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147279, "uuid": "efa39e54-be8b-4290-9c1a-7a5e48237db0", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717147279, "uuid": "5295a7b8-5e54-4e57-9f99-8aa010a2b290", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1717147933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147933, "uuid": "0991fbbe-daf5-48b0-8bba-b8abbb70a095", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147933, "uuid": "c3c5500b-0ace-4b38-9562-30efc428377f", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147933, "uuid": "0e76f3bf-0d20-413f-9018-7320403c7d91", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147933, "uuid": "cbbf961a-d834-4e40-b02f-be5750d8b438", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717147933, "uuid": "4a0e114f-b4ff-4991-82cf-bfddfe44b880", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26a570e7-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717149002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149002, "uuid": "b39bb787-942a-433d-8d42-82f647841c6f", "comment": "Malware payload (Stealc)", "value": "76f4aea7bbf9169fa5a6b4cdea267f41", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149002, "uuid": "459bd568-59ac-4bb1-906c-f11751e266ab", "comment": "Malware payload (Stealc)", "value": "685500d217a5f57fea5cfa66d81ff71d6aa6033ff51404895007b2521b4ba24f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149002, "uuid": "aee62f1d-cfd1-49a1-9c1c-9eb04d21920e", "value": "T1D5445B0396E1BD45E9668E729E2ECBE4761FF9704F4863AAA10CEB3F007C161C5637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149002, "uuid": "00c8b21f-d535-4877-a5e3-aa2fd264b0ca", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149002, "uuid": "95262d33-860c-44fc-ae1f-8b3e34693264", "value": "6144:fFi5ii6/zoKPZXhHx5awbeYtLj4ny+j4nyNh:fo499PZFzeeITI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149002, "uuid": "849640ae-254a-474b-85b3-5c9f21671208", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149002, "uuid": "296c0da1-ec7a-4e1f-b5e6-9347fa5e4d01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a14cff3f-1d3f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717149248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "970a1913-2047-41b5-966c-821f4df7148d", "comment": "Malware payload", "value": "8515faa2640df7784f1304a4d48c9e87", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "6bf8c00f-41c9-4b5a-8b7d-7e89b12a8951", "comment": "Malware payload", "value": "b9566789c853f706dc06e947eb3d19ce7859c3483f6e7e85296b28f4a8e9090d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "38b6866c-0af0-4397-bba3-efcac765150d", "value": "T11A7533E91EEF9D3F99466974E34CE20B98CF54C0D007278891D11EA73D2A5CE98FD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "cf3bb433-04bc-46d6-af59-158a35aea083", "value": "49152:7/93vQFdbDmAFIKhZRJ1zEpcCHTfoGW+mNAeO:jrAFIqZ1EplHTdW+mab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149248, "uuid": "ef96316c-5bc4-45ed-9c1c-04c95a837801", "value": 1608784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "34ad37b3-9110-4f6f-aae9-72f188f7caf6", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a11dbe-1d40-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717149248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "b575f847-280b-4ad2-9d67-819ccff37d48", "comment": "Malware payload", "value": "2943fab87e9c1b8ef86863f47d41518a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "8d66d36a-8f4d-4a73-9675-958ab6b757e1", "comment": "Malware payload", "value": "8c8d832581a492083e8a97a1016a4ce86a3e0f0c20b21d21e6334e47982719bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "6ae52c50-6f9c-41c0-b3c9-b13b8abdd134", "value": "T1F39533EF69A0B03226A08A7296546BA403610BDF311F5D2527F7BCC1EDBEA50E5DF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "42382868-6527-4ec2-8a8e-9525455f5a26", "value": "24576:SVYUv48dzkVceO2htyDVjYYqyjDFEzQZ7M/wE8GqKyDcnI3BiiIL3LI/ipMPLFdq:PC4NVNhc8YpqJYER65343nsipMP5qv0I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149248, "uuid": "611cfa7b-47ff-446a-a361-72791af0daa4", "value": 1926516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "b3680c4a-b5aa-4653-8fa2-2518bc6a0aef", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149248, "uuid": "682e2a63-7858-46a2-a449-5b498c25cdda", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5a25e1b-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717149295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149295, "uuid": "0388e679-807b-4ecc-9982-f9b3fd3191b7", "comment": "Malware payload (GCleaner)", "value": "caec19abcfe526915b3eb527103ff67e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149295, "uuid": "51f3ba90-37fd-43ec-be45-9d70859012f6", "comment": "Malware payload (GCleaner)", "value": "c87572a612864b9ed32ce89f148639fee19d4673c6a25714c0a33ac18854b036", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149295, "uuid": "257bf4af-f20a-4b5a-a0bc-4434e12cc239", "value": "T1BB649E03A2F1BD15D9658B778E3FCBE8372EF9704E1973666204BB2F19711A1C6227", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149295, "uuid": "bb235ecb-c6e5-4b68-84aa-e23ddc38d067", "value": "3a582865c782b33b9d8f1f43c5ada28c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149295, "uuid": "fdfb8ed7-eff2-45ec-b30d-f74ed3597182", "value": "3072:medOQfrIFSkI1K3X8OWdSEKeGKoLupL5wW1mhkl0MveGyWbjb5HGZuoGZu0h:mGaCQ8OW5KexoSpL511mLsplnwu7u0h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149295, "uuid": "cd82cc8c-8ddb-4e9c-ad34-090c06914b92", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149295, "uuid": "6e471cd5-87d1-4d69-bae8-261ae0767d57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dffb4a88-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717149742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149742, "uuid": "2b8dd714-c59b-41ef-8b36-7f80218ad3f7", "comment": "Malware payload (Amadey)", "value": "be5240adfd2c249f02a81d2a3fe29d40", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149742, "uuid": "8b11cd4d-b5e3-4c81-bdca-7e2e1ead1172", "comment": "Malware payload (Amadey)", "value": "c9cb4645133bfa2848c4f70c3fe4c9f7cc21ddbe25e5f7148df0f718f52fa99d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149742, "uuid": "3f2f384f-d8fa-4c89-aa02-b7be19c89ef9", "value": "T1F895332A1141FE90DFAE5A32FE7B6E331874C99CA1C3E6131265A43D92777876C13B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149742, "uuid": "fe769b7e-e295-45f3-9861-6661a5de9d9f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149742, "uuid": "194166cf-fe84-451a-a875-f1c91018b942", "value": "49152:Rwrdc2PsqD3FI9Pg0WaqbXK/TsvVTjEp3+js:/2nDFIZg0NSKs1jEpu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149742, "uuid": "d7fe2ed8-25b1-423c-a798-95e05b71877a", "value": 1936384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149742, "uuid": "b936fe1b-3c7c-4555-8545-917a2a88b966", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "052cbde3-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717149805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149805, "uuid": "200218a8-2181-438f-8fae-143c4cb8633e", "comment": "Malware payload (Amadey)", "value": "aa7088a0d0ba8ae46937a77fe73e6c93", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149805, "uuid": "9eead7c8-36b3-47da-a0de-e3a3495ec4ee", "comment": "Malware payload (Amadey)", "value": "6550ef0ea2d2adc719e9b586c86710ccdf7e5df75861fbb9122a3cce95da6165", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149805, "uuid": "e48804ff-0338-4bab-a2ef-c2cfe93a3194", "value": "T1969533E1599110B9ECBEC8B8431A975DACFA16288D0F89792E3782FC50CBDD367917", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149805, "uuid": "b7b4376b-8735-4874-a03f-5e650fc1cca8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149805, "uuid": "3db0a036-0587-41d5-b56a-8154ba115756", "value": "49152:exljQT0GhcckK5KyJ88Eah8wjuSK17yQj0/JN4FDj4HTouex3YPDL+RpJp:aFQTfJ5EsiSK9yQQIFvazeara", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149805, "uuid": "9edc24ee-b210-4ddf-8a9d-6389d4984183", "value": 1917440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149805, "uuid": "54ef3b1a-a9ce-4c77-b39b-ac358716afe9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b59480f-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717149949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149949, "uuid": "2d4c33f8-9a02-4246-a8e6-a7c3a0abf89b", "comment": "Malware payload", "value": "4532339922e2823e91c364aef891efce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149949, "uuid": "aa236836-9429-4b33-a0b9-d794ad606e3e", "comment": "Malware payload", "value": "56cb0e5eb7a25df94056512571ef13d64b36f8495214868bf08c6ed3300bb783", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149949, "uuid": "ce96ee54-0b10-4ca1-9c9e-312be9178883", "value": "T123B53348B6F0247BC0AD1576507FBBDDBB834A117CA08F1966A90D918F32B0377EA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149949, "uuid": "331fbad3-df27-4253-bcfa-055f45be33fb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149949, "uuid": "c80cccf1-4622-44cd-87b1-5af23295c6a1", "value": "49152:NBjerUnC9RRwtTnfBsqvFroqnEDLxWK/V4wkhvTc8NwNXYWjp/gYmj:LvnCetTpzdr3OWtJGdjOYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149949, "uuid": "36d422d9-a496-461c-a2d3-aafcf96a2b02", "value": 2425856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149949, "uuid": "ae949e47-5cee-46cf-94e8-ff819a2efc5c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e2269b3-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717149981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149981, "uuid": "9b62fd8b-4b8b-4996-828c-1af8cce7f69b", "comment": "Malware payload", "value": "ffe67b8883a2ef8788317550e5af9279", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149981, "uuid": "f2649c5a-b2b1-49d4-b184-8880f0f32c03", "comment": "Malware payload", "value": "3260aa6cf8a83e602d7b49796dc8523f471b85183067ba98142634c9d4d0da98", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149981, "uuid": "0e3cf39c-f96f-4851-b7c0-836aa7900f77", "value": "T10545BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149981, "uuid": "26700817-785a-468d-8dea-5d0ca2252c62", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149981, "uuid": "1a84eddb-ec53-4fb1-876b-fb2ab226038d", "value": "24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8auU2+b+HdiJUX:oTvC/MTQYxsWR7auU2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717149981, "uuid": "42ee8a2e-e95c-44d4-9ef0-d328ace09819", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149981, "uuid": "b454ef50-185f-4880-86d3-d81348209238", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e672d9e-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717150062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150062, "uuid": "57e1e86a-2c17-4ca8-add7-6408558a9cf5", "comment": "Malware payload (RiseProStealer)", "value": "e521a96b0967f7cfb257cd195d2ff36d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150062, "uuid": "3cb1df5a-4b5c-4e95-8b35-8a5c041740ae", "comment": "Malware payload (RiseProStealer)", "value": "f363154ccf091e6a1c4e22de9f02fc3c2d37267d84c233a48a067549ae530008", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150062, "uuid": "9df31f29-e1b2-4d31-8d2b-e243507316bc", "value": "T14DB533D32E258A30C6AC4CB328A2D3A43945754FDBD6A719F4C3DED91B407DA6AF40", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150062, "uuid": "9630c12a-191e-4755-a713-7700626fd709", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150062, "uuid": "1e00cdc7-2463-40ea-9f31-435237c6e50a", "value": "49152:WkmKhyq24kI3qebVa5graIPCo3UKOOPgW7EKs3LIfiSJ:WkmKEqlkAbk5qKSUFK3fN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150062, "uuid": "dd816b46-c5c0-44a9-8539-4233a762571c", "value": 2340352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150062, "uuid": "34a890aa-7e4b-437c-b26d-331e55832220", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af9e7676-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717150091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150091, "uuid": "abcdc780-c161-40e8-828b-582499cb4867", "comment": "Malware payload", "value": "28310904ffe9c198df11e69fee604579", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150091, "uuid": "b36bcfc6-d0e6-4f57-bb60-e222f476fc95", "comment": "Malware payload", "value": "5a9cc77ecaaa895933f6f891d70be444c53a0ab5d2731045a6b3b45f67c69138", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150091, "uuid": "dec3fe3f-643d-42fa-8740-7fbd8aa51af2", "value": "T190159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150091, "uuid": "f74d1b9f-6d77-4625-a0fe-9d985bb6f29f", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150091, "uuid": "cd1a38b7-b898-4095-9628-ec0b88238779", "value": "12288:1qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T5:1qDEvCTbMWu7rQYlBQcBiT6rprG8aA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150091, "uuid": "6cddbb71-5644-4f8e-8ffa-8eb55d3fddc0", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150091, "uuid": "9082de11-9571-4e98-b535-c36610024186", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e69f79ee-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717150183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150183, "uuid": "953d81e6-27bc-4a5a-b8ff-75fa6f3b2f7f", "comment": "Malware payload (Socks5Systemz)", "value": "bb12b17a620828cf98518f3e9c8a6111", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150183, "uuid": "fcd1f20a-9949-441d-b0e6-e3d55bd51cd5", "comment": "Malware payload (Socks5Systemz)", "value": "89c3d82718c7ba119f3e0bf0ed8c52596c1e5f370d9faf64bae7b60ddcfe342d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150183, "uuid": "583de3f4-3ca2-458f-b8f6-d9d2f35ef30d", "value": "T1EA363302C5AA2AB5F15294F98C64F4028972EA5B8270726116FC1EEFDFBF3C49D15B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150183, "uuid": "9a7f4c11-3a63-42a5-a208-a0ddbafe28c4", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150183, "uuid": "9d0a6224-2be7-4daa-8f67-7e7c65796573", "value": "98304:mWXLgQHUgansnEdn3pwjieXyJOhI4Y25SatZaM/KyDvB2e:BbL0KnE13p4+JNiSatwCnDJ2e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150183, "uuid": "88a2f4c0-ac67-42db-b820-7442688547b1", "value": 4972867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150183, "uuid": "0821f143-d5d6-4a42-a057-95a9adbbe36d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61deb81a-1f36-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717150592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150592, "uuid": "ecbcd84c-616e-4c3d-97e5-28ffdcfc4f4c", "comment": "Malware payload (GCleaner)", "value": "a8faccbc968a82ee07144931a7d9ba18", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150592, "uuid": "2d940099-7225-4953-8667-c9da2e01d1b3", "comment": "Malware payload (GCleaner)", "value": "11a7279a14678aec7f4b8e24181488943856c91cfa6f04ce34572c50b7f8b8cd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150592, "uuid": "679632d5-dccd-4504-b28f-3349a7106eaa", "value": "T1A7649E43A6F0BD11D9A54B768E2FCAE8772EFD305E1973266215BE2F14712E1C9233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150592, "uuid": "48be9c5d-0798-49ae-befb-62e9e260faed", "value": "2f3c2a0d201b39df299a19311cb60912", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150592, "uuid": "e3085373-af16-4f6b-933b-ed5a0adc19fb", "value": "3072:k+damXYoVInpN4ilLEYFpLM5peqBUsa2j2H791RUu5ON+vz1Ay58N1B1Qh:+mLVupeygYFM1Wsat79MUON+vRAnz2h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150592, "uuid": "e33412a7-092a-4c6d-a6e3-aa5931399985", "value": 313856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150592, "uuid": "9caa5437-1ab8-4c74-8c0a-c9fbbf12ce68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9cd136-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717150706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150706, "uuid": "aa9bf328-6ef8-4ab8-b005-ee2e4c757eaf", "comment": "Malware payload (RiseProStealer)", "value": "e99605f8de15e4ac43c1ac5c56c2b783", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150706, "uuid": "a13db797-801e-4781-80d6-013b0d686b17", "comment": "Malware payload (RiseProStealer)", "value": "b42b24d0549e201cf0727f1edeaacbebfed2eeec6af9eff6bdea4bf4ab0a1918", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150706, "uuid": "91fd015a-001e-4cdf-ae92-bc6a9039efe1", "value": "T13E96138560C48A78C0C74138F455C1D53CA2AE89C4ED864DBAFAB837BFB1AD97055F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150706, "uuid": "b2bd98ff-258a-4e1f-a889-9e60cf39751a", "value": "b5901251689f3d7d62dc1530161a4784", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150706, "uuid": "70a7b226-e3b4-414a-a45f-28146efdab60", "value": "98304:J+UnFjkb2q0JaPq+KVWIqZe5rCph13dYFCd3D1JZIfNMWsYzo1ZHuOWq+fu+s7GP:XC1pSWpZeBCph1oCdiG0zGMOWq+WDSP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150706, "uuid": "9e202072-e290-471f-b853-a0cdcb4fc314", "value": 8751752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150706, "uuid": "c938749a-c96e-4780-b831-dc6880fa1384", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c92b6c08-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717150993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150993, "uuid": "54ab7cc7-e245-424e-a5c9-143ae46c6dbd", "comment": "Malware payload", "value": "cd7da6a37b660ce1eaa2b4618cd339fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150993, "uuid": "f588d4fd-8e3c-4908-994a-65422154c40c", "comment": "Malware payload", "value": "9477b29ecdb9c39ea618d84f4191717fad1a6137d1e56da0a2997056b6aacd24", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150993, "uuid": "2ea6fe1c-d034-4040-8e03-02ad3826ac41", "value": "T156A73385CF3424B6C9A964314EB900E592FA5F01A517F64EF25CA87E7F814CE0993B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150993, "uuid": "c7625614-598b-4286-bf48-64dc19c47079", "value": "786432:YBqBEUXuPEkjAd+eMRfhuf9r9lPCC0tYu8vqmo1ztKgKeCP5eohnfpXQTtoVE8x1:YYBEuuskkd+eMRJer9lPC/tREcxupP5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717150993, "uuid": "298b9add-edc7-4234-a8d4-445810dd37b9", "value": 46069503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150993, "uuid": "c262b60a-e70e-45a3-bdd7-88f67ca6f5e4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb3c93b8-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717151050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151050, "uuid": "bc9b5bfd-a8f6-4c56-9934-bc3725bf8a38", "comment": "Malware payload", "value": "2012dd1545fa0adf553183ce718594af", "object_relation": "md5", "Tag": [ { "name": "Autogenerated-phishing", "colour": "#211033", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151050, "uuid": "5a0f7cfd-769e-4367-9638-ed68bb660336", "comment": "Malware payload", "value": "a4405a40a46306cf1def3000eca705f8ef1c89496e941c49b091f0cf7772302c", "object_relation": "sha256", "Tag": [ { "name": "Autogenerated-phishing", "colour": "#211033", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151050, "uuid": "a85e8bf4-6509-4e1a-b0ff-a2098c4ad653", "value": "T1FC673393C39E5828F721D87245B411E1BCF926165282FB6E492DF0783CA7E188D67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151050, "uuid": "659ce875-0a2e-4101-a102-1ada1522d588", "value": "786432:LN51E1NGO+5FnTMAjf9Skopr8WIvqxYoioC0w7GwMN:H1EPGrFIAjFdoprHQqLB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717151050, "uuid": "927758a7-a6d3-4d9f-9d37-4e5816297c32", "value": 31278697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151050, "uuid": "78d1837f-a39b-4b6b-9c1f-33c2811d4bbe", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e8c792b-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717151163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151163, "uuid": "ef4fee0a-d781-4d90-aa11-037a214d5106", "comment": "Malware payload", "value": "ec7ce45209306cdf244dbe7d529d299c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151163, "uuid": "67b2a0c2-fc16-4362-929c-f5767ca16ad8", "comment": "Malware payload", "value": "93373159b44660ca045d22af05db36e8bda2ce857ce11fea9f5cc9b881d28cce", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151163, "uuid": "245f76cb-64de-4e85-aa2c-22549101ed7e", "value": "T1B274BF42B2E17C84EC264B729E2EC9DA7B1EF9B08E45E36E21086A1F5470171EF777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151163, "uuid": "69e7bc50-d2ea-4f2e-bc98-3a40c534ff95", "value": "2f3c2a0d201b39df299a19311cb60912", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151163, "uuid": "528bdaf8-b8d3-4a65-8b65-2665bc878e58", "value": "6144:eupkliaogejG24NuU8WXsEKJ3Xp+la54m4Lh:eGkliaogei24UU8Qs7J3XMlXd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717151163, "uuid": "9e6e6bb3-fb82-4c78-a33f-f46617a29910", "value": 351232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151163, "uuid": "5f12dd86-2c21-4299-bf2e-22d1393b3ba9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ed37aa-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1717151287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151287, "uuid": "ab0d5231-db7d-4235-8823-abb4550a92c3", "comment": "Malware payload (Mirai)", "value": "f33e3ad3d114f55dc0ead8f17c21153b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151287, "uuid": "86504b71-6df8-44f2-ae39-03378a4fc8ee", "comment": "Malware payload (Mirai)", "value": "21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151287, "uuid": "c0255f10-2641-42e7-95fa-5099d0e8089d", "value": "C564C08AED00AF61E4D521B9FA5F034973634BACD3EAB111E6249B3437CA65B0F7B045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151287, "uuid": "cbc1baf6-1de8-497f-a1ae-1fab6cfe25bd", "value": "6144:2IIKXhZtL7jOTyIG87XTabE5wKSDP99zBa77oNsKqqfPqOJ:ZTj8w6TabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717151287, "uuid": "8921808a-255c-437a-9e94-77d848e1a934", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77212f1c-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717151714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151714, "uuid": "16e8270b-ed02-4e7b-846d-07db3a8a706d", "comment": "Malware payload (GCleaner)", "value": "4b7a9d79c11c483b232f4d43d484a197", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151714, "uuid": "b2096635-aa2c-4d45-8aa2-3324f3dbc5ba", "comment": "Malware payload (GCleaner)", "value": "7ac2a16d33f1c5f37b313687ea809457be01d17d334cfe60faa02bf4486c95b5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151714, "uuid": "d98343ca-ce7b-4449-aae0-75569d02e51c", "value": "T16D64AE03A2F1BD15D5664B769E2ECAE8772FFD315E1573266218BB2F08711B1CA233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151714, "uuid": "3edc2df0-874b-48fd-a5fe-f3b8bc4165b2", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151714, "uuid": "6cca370a-ca6b-4a4b-aac2-9ff1c63beeff", "value": "3072:gFTVSqPVVm4ytAoA3JLcZdtQtJYdN3yWaQTB54TKJ5Z+Y0h:SScs7tJAZQBQvYdlvF5+KYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717151714, "uuid": "fd69837d-c2ec-4724-b54f-9c67af6e3dea", "value": 313856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151714, "uuid": "81945b5d-0835-4995-80d3-19444b8b828d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dcd3be0-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717151752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151752, "uuid": "ace2efff-2d5f-47af-aede-feaf53316730", "comment": "Malware payload", "value": "9e8c43132fb010479be31f9c78a80800", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151752, "uuid": "0790ccb8-707f-4f99-aa4d-fe74d6e79274", "comment": "Malware payload", "value": "3fc7b91263b34a44644c0840783375bb9b314959924e58d8ef44c4ae930f7d6f", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151752, "uuid": "19bc69b8-6b90-4319-988a-2a7b8838a28a", "value": "T18C560143EB44DB9BD9BA83F16B330C992A131F05C643AADB541576BD2DB72C10EC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151752, "uuid": "ed49db79-2f41-4dba-ac39-7b43b3b3fa75", "value": "98304:52FjDpkqNJ7J9JAzmzRzBXTa0tq0i5K6UKVgY0fmh6UoDdai:SjDLJtAyzH5LEK6bMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717151752, "uuid": "80f1af56-37f3-4a68-8a86-7a46e3928c86", "value": 5923155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151752, "uuid": "d8bede3a-1d39-44a0-81ab-1def3a1a19b5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5628b396-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717152088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152088, "uuid": "dd275802-7878-468a-9875-66d8ee8b4d8a", "comment": "Malware payload", "value": "412df1040aeb0ced514590f7f69fd599", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152088, "uuid": "789f84c8-ce15-4974-afaf-b3581579c49e", "comment": "Malware payload", "value": "7647bb96927433b06feead0549dd6423c8228102a274e848a5422533205dd398", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152088, "uuid": "485234a1-42ec-41cb-b6d3-157689953011", "value": "T13026F013FB48DAAAD4BA83B56F770CA96E070F04C652AADB0111767E3E771C50DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152088, "uuid": "382bcc4d-9a72-48f9-920a-7647b2ffb384", "value": "98304:c9/hq2ux8sp9Q884g7xmz+zBeTE0tpUhcVDg7jjgL9Hjr:yaBF8170z336hDCr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152088, "uuid": "bad75310-91a1-4acb-957e-7ab6d1829d92", "value": 4579679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152088, "uuid": "6d8a1c29-613a-40a7-acf6-dacb737c9e5a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16e7d3ca-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717152168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152168, "uuid": "a09f765e-68d0-4405-b74b-68cea500eefa", "comment": "Malware payload", "value": "28e7fc8f2ed7f445e4c1afcf63c0da20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152168, "uuid": "cc51c55f-2ee5-4981-a39f-2221a9acb996", "comment": "Malware payload", "value": "8fb63ac77379ecdcb5e40f0f280bfa9779e0315de8dd4e78b48f34b85e634ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152168, "uuid": "812bfa0b-b430-43f7-a3a5-622489b267cd", "value": "0E03024633953F33E56248F4D3FCAF86615ABD54EFDE142BA4013A65B07225D28CD81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152168, "uuid": "631a00a1-fd29-48dc-80dd-6ff651e684a2", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04Y:yYI0ARqw1qAEW67UIWi7M8gz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152168, "uuid": "421260eb-77a3-4113-ba23-224d238434c9", "value": 39096, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c1f52b1-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717152501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152501, "uuid": "3567c1f6-820e-4549-9eb4-f4c008ead4f2", "comment": "Malware payload", "value": "5704163376ac23589cc97e38b54a97ff", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152501, "uuid": "fd070ae1-dfa0-49ae-a11c-1bb04a7973d1", "comment": "Malware payload", "value": "01fb09b5260cf3f99c25223f2c4b66139ff13dffa937962b5606b536bc47d775", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152501, "uuid": "abf83ad8-c967-4ecc-bc07-866eca2c8644", "value": "T13723345263FA0508B6F72E49993626754F37BD9AAC3CCA5C468C650D1BF3E40CC64B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152501, "uuid": "e010b2c8-43cf-40b6-99db-43b233058e99", "value": "384:LiDiF+HuxQyBptSOo1iMZ+hX0d4TciJoIvdWayX1qPWDDonsHZXHb:LXft8b4TTJoIvdWayX1qi0sHZXHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152501, "uuid": "76d0aa59-4278-459a-9c6a-0c213ad97e55", "value": 48308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152501, "uuid": "8c8870a5-da30-4b55-9b31-ff2f59ee2c60", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9954e29e-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717152630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152630, "uuid": "50a92534-64f8-462d-b04b-080313468df2", "comment": "Malware payload (GCleaner)", "value": "9a340f548cb0d88db861500899b01d7d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152630, "uuid": "a746d4bf-bef1-47e5-953a-995ef2030d9b", "comment": "Malware payload (GCleaner)", "value": "8e3ed73d7ac3ec53e3d15d78848021cf6f1ce63218480929b9457a79afdb33de", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152630, "uuid": "79b2b945-5ef6-40bf-b513-9ccc2afe5c06", "value": "T18F549E0396E1BC44E5678A328E2FFAE8361EF970CF4BE3662158661F04B117EC563B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152630, "uuid": "a4645c39-c78c-44c3-b53a-a6f13dc12733", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152630, "uuid": "b54bb7d4-75c0-4144-9adc-8d6e6cd02d5d", "value": "3072:Tqn/1inDsfL7XI4Otjvo99W5p5sR65F3J5y+h:TKwyjOtjvoDWK65F3h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152630, "uuid": "3153541d-b4a9-49da-8b68-fad7b3f1dc7d", "value": 280576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152630, "uuid": "3d49a79d-71af-481d-95f4-2f7d5caad6b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1ecf2eb-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AZORult)", "timestamp": 1717152725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152725, "uuid": "3e257345-4df1-4087-9094-50f0453f57fa", "comment": "Malware payload (AZORult)", "value": "0089e341efa862f22d3af9894d1c5448", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152725, "uuid": "806da8f5-4789-4d22-a6d2-b6b49342aeb7", "comment": "Malware payload (AZORult)", "value": "bfc1cdded42adb884fb46ba53e2f023d0c27d46cf8645614094f5714ebbfb9a8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152725, "uuid": "b6aa8aad-98a9-444a-b3e5-b9b0543903c7", "value": "T107142A499B490A72EACDCE3794F25B02C7B4D151AF8AC349288CEDFA0E0375759437", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152725, "uuid": "0283d644-9b5a-4b79-af2b-38393500c926", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152725, "uuid": "a6301629-a72c-4759-91fb-a84a559d434c", "value": "3072:oiwqHidIcWy4F1qiYD56979Z9+p7NVMsvKi1EcUWAQ+iULWafUvjfH:OqCd7WrYQ979ZItNWJi1EccnbsLH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152725, "uuid": "f54087f9-82d1-4ad4-ab2e-2518c521da90", "value": 200568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152725, "uuid": "0bc4542f-6578-488a-a09e-512cc8b8703f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "606d3135-1f3c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717152964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152964, "uuid": "b50f0286-8989-4131-9d93-3db1b7cecbb2", "comment": "Malware payload (Stealc)", "value": "a7ea08450be8bf5dff2f0a207611ca85", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152964, "uuid": "4415ed26-f012-45db-983a-6ba7503dad70", "comment": "Malware payload (Stealc)", "value": "e8fbaf1e0a9724d541898c17c3cc7c2b703d00ef2e8bd3e0fb70a7c0df8ca9e7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152964, "uuid": "4502e083-3823-47a2-a31b-65087cb2d4e9", "value": "T1ED446C12D6E1BC45E5278A739E6ECAE8F61EF971FF48636B2118AB1F04705B1C1237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152964, "uuid": "560f4d12-0388-4d69-bd18-03327ae0d1dc", "value": "2f3c2a0d201b39df299a19311cb60912", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152964, "uuid": "2a21d6c8-318c-4a38-9985-85b9f83db51a", "value": "3072:IhSR6pi8MnUso6xoko8NzSvCSkC3jV/j45zAbVX8bVXmh:Ihovo6KkHzuCSb3jJjnBX8BXmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717152964, "uuid": "9617b831-2633-4c73-ba45-7def26715f8b", "value": 253952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152964, "uuid": "7ea600b1-ac19-44cd-b8b6-7693ab8ab413", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17bdba1c-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1717153272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153272, "uuid": "5f2b556a-d535-409f-a6f4-f0cf25b4f0f5", "comment": "Malware payload (RedLineStealer)", "value": "74330f4c8e412ee96b41d01561ed1873", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153272, "uuid": "1974cf2a-c9dd-4872-8bae-d6e921cbb09d", "comment": "Malware payload (RedLineStealer)", "value": "cb1b59490c7c73ca61e571db0fafd1e7dbd406285eeb47cf464045c3851846bf", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153272, "uuid": "70352f11-0e6b-40bc-9c21-5e83eedb3371", "value": "T12016336170C08670D573187609E6EA898E7CB86007FA5AFF27984F7E5F120E2E5351", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153272, "uuid": "9fe1bf86-ecb4-40a5-9ba6-dd75f940d499", "value": "b17d49828275c0ff5fc68aae18e3f1a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153272, "uuid": "1fb3d2f0-073b-406a-87ae-42351e9b5fc1", "value": "98304:WO5Ko5AfwLVKn32NRPoB6RojYvPNcOFH2pxmNNyye:rKovJC3ZMvZWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717153272, "uuid": "94925ef9-7327-407d-9059-08e93b988e35", "value": 4404224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153272, "uuid": "da38b3de-09ee-4ff5-b6db-9c1c3b0530fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065ddb8e-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717153775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153775, "uuid": "c8452334-8bfc-4cec-9a32-2ce891269228", "comment": "Malware payload", "value": "22fe34548af4990a0abf3353b6163c26", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153775, "uuid": "03e5d334-35c3-4d8e-899e-81b624dcb14e", "comment": "Malware payload", "value": "233931f49d7ae93d1662d6f2f879cd6e8fae14f9630531bd8876024acb845f69", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153775, "uuid": "99ccc162-9cd3-4167-8dec-c6e151b37f73", "value": "T17516E003EF84CAA6D5BAC3F56B370DA92A170F08C6529ADB5454767E2EB31C10DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153775, "uuid": "4c0e98ee-a0f2-4043-bb6a-6469ea00fdac", "value": "98304:wqf4x7xth/IEzLhmzBzBVTS0tSEuIekj5QRe:wkm7l/IALEzhRjwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717153775, "uuid": "b417b490-4b52-4a81-abeb-db3793d3d99b", "value": 4297041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153775, "uuid": "29d6712d-ce93-4f81-aaa4-94b7170aa7f9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "befd930b-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717153982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153982, "uuid": "cea98771-58f2-4724-965a-b7fae4507827", "comment": "Malware payload", "value": "5bfc5a36afa0a133dfdcc449dbf7560f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153982, "uuid": "97656bdd-31bd-4683-8470-c6c1f28a6654", "comment": "Malware payload", "value": "c158d60182aa0ead1722044052a65a418eca06fe00908eb64db9d3b42c4937cd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153982, "uuid": "4a97e602-f47b-49b2-9b97-8869a4af1269", "value": "T14DB533A235B3ECDDD13D9A341E12B3E3C7D4384D096F4F49A3982A6DD42750B61099", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153982, "uuid": "a55facfb-f2d2-4790-85df-d0e929271220", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153982, "uuid": "a34de089-76d2-4a6d-b594-5c112c76c5c7", "value": "49152:6GxdxgtDXw8T5aqRH4hTV//1Jhulk/BN4nj3uOdLlFzveSp/8dKEyV:NdxCXwaRqb//HhjWnLuOx/v9p/V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717153982, "uuid": "9bd6008c-6f87-4f8a-bd25-8b13122b0e54", "value": 2415104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153982, "uuid": "0e63858f-1780-4f02-878e-4cc0e3c90012", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f72e9ed4-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717154076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154076, "uuid": "46243f7c-2c09-4779-b888-29d1b3938aa4", "comment": "Malware payload (Stealc)", "value": "d76f81a2969eaadb6f3d6089c7b83e88", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154076, "uuid": "8070b092-988c-4ad9-9bfd-b3499384ad20", "comment": "Malware payload (Stealc)", "value": "9dbf88455e27e9e2ddff1e78406c6d3b576173bde4625739b666fc73706a1c87", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154076, "uuid": "21699f00-37cd-490d-9dec-82ccc4fdcafc", "value": "T1A7B5AD36B1908777F0731D3C8CBE639949267F201E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154076, "uuid": "3eecfbb4-7e52-40fc-86ab-ddc30e0c7d40", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154076, "uuid": "231764e2-5479-4380-86ac-fc5be34c7fd9", "value": "49152:wQc81KnB/a/hNT/dNYa8aesY3Ot4N7G/:wDta/hNT/dNn0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717154076, "uuid": "12322c11-d786-45d3-a913-f821cab9f994", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154076, "uuid": "5e1ce691-5e23-45a8-8b67-f590ee67d973", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc30d24-1f40-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717154839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154839, "uuid": "f068d8b9-be5f-41b8-a266-db83e4d8c4d3", "comment": "Malware payload (Amadey)", "value": "aad80fb7f941706d746a888b39d3cbf0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154839, "uuid": "ccabae1d-db28-436b-ab2c-7fd084a6c3f2", "comment": "Malware payload (Amadey)", "value": "49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154839, "uuid": "10298329-849e-46a2-96e9-2887d55781d1", "value": "T15A95331A8CB21199C3E9473854177B25A75870E3D9E05A10391CD1E0FEE3BEEA58FD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154839, "uuid": "9b135000-9aa4-4837-aece-71ff4ac08acd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154839, "uuid": "c8c77920-d9bd-4abf-8889-68934f40888e", "value": "49152:USmg/0n9j2TKC1ot+a6To15LEuQBZaql/yGt:USmgs2q/6TE9AaKyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717154839, "uuid": "db9d83dc-706c-4e5e-9ad5-022b92dcf5bc", "value": 1899520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154839, "uuid": "6a786266-87dc-4f01-be7b-c5757eb36a01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f2c6572-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717154975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154975, "uuid": "8ffc3390-fe76-4e79-8807-57f5e9fb3b22", "comment": "Malware payload (RiseProStealer)", "value": "9f981e3d5bff3d57b93f93c1bff821a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154975, "uuid": "2b8c6aea-0f13-4105-b169-654397c6a42b", "comment": "Malware payload (RiseProStealer)", "value": "e9133cde9553f0ce296eb0e1cf65e7fcd69ae990ad9c613cab0ee9f9a52d568c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154975, "uuid": "ca2c6a62-08b8-414c-a9fb-b93097b16bf3", "value": "T1FDB533A39F6E1A76DD9D9C33A4C15360327071A69616C72F310FB5E918357AF8BBC2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154975, "uuid": "95359c16-ea1d-4d68-aa52-2dbab2803eeb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154975, "uuid": "395fc07d-a614-4b6e-85a7-3e18eb2306eb", "value": "49152:nkmKhyq24kI3qebVa+NrtFtCfQsMjiw03oGq8MoIxHmc2f+iU/6FoYqueHXQdtwO:nkmKEqlkAbkorfAofiw03oG9dIxHmei5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717154975, "uuid": "1399bf80-505a-4d13-8ca4-ed98bd5ad8ab", "value": 2342400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154975, "uuid": "795875b8-7364-4af6-b41c-d62338820584", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d900dac-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717155214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155214, "uuid": "2dfdd8d1-7484-4beb-b433-6c57ab64364c", "comment": "Malware payload", "value": "b0d1f0f9bb0c46257b92a713aa6b6f2d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155214, "uuid": "2db753fb-8a26-45ea-ac50-478652e50c3c", "comment": "Malware payload", "value": "f0055e699ee2a25635d2b5933366a2797d67de46a6cc5986150fc0971ea65432", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155214, "uuid": "8b580eb2-57e1-46ac-a20d-087beb7d7a92", "value": "T11345BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155214, "uuid": "28cf0a2e-e74a-4fdd-8134-f83403fabcd4", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155214, "uuid": "f3d21a4b-f133-496d-b48a-56242a6d42d6", "value": "24576:MqDEvCTbMWu7rQYlBQcBiT6rprG8auS2+b+HdiJUX:MTvC/MTQYxsWR7auS2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717155214, "uuid": "9715fc15-c06f-4271-96e8-d445879ca560", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155214, "uuid": "bab09ba8-1eb9-411f-b5bd-df2f6b930787", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccfafb74-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717155294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155294, "uuid": "6403aa09-9713-4b65-b93c-894e8f98461c", "comment": "Malware payload (Amadey)", "value": "c3ee79d2695e21334e0439f9a1ab02b7", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155294, "uuid": "5aa6cfbb-da1e-412b-8040-a6576da3047d", "comment": "Malware payload (Amadey)", "value": "940c60a55734ae985a1878f88aba4ecd75d1adad09b718e3824deaa9dffcc7d9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155294, "uuid": "415b33a3-ed7b-48b3-98ee-2aa305262566", "value": "T1989533464C87E17FD7848230D6D6996BB6284EC0CDF086E4B392A6548CDB7E73C681", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155294, "uuid": "e571cf17-9fdb-4b70-b664-d6dc2b094173", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155294, "uuid": "5f906eb1-fbbe-4b0b-98ab-2abf2719886f", "value": "49152:I41mHYiONXKejp/M6TvCuhekwhmoKsJZsBX:X1m4iSaejp/MgekwAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717155294, "uuid": "b017475e-fda9-4909-995b-0583683326d5", "value": 1904128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155294, "uuid": "7351aab3-2bcc-4a6b-99ff-5609576d7ada", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdf6dd52-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717155624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155624, "uuid": "4a332eff-1ad3-49df-8a7a-0279a4fe8ca3", "comment": "Malware payload", "value": "8c9f966ebcc3c7c46cbfc14c283e1a3e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155624, "uuid": "6231bdcf-404c-48ad-bd4f-75d052a34110", "comment": "Malware payload", "value": "81ce3a43501e94c567fcbbc583010eba25696ec4cab5ae9705f9795e37378f62", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155624, "uuid": "f2a1eaeb-8e4d-4a61-b723-5868c5b67e94", "value": "T16A159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155624, "uuid": "120d55d5-52bc-477c-baee-739a4e20eb78", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155624, "uuid": "af593e52-501d-4895-9ae5-2b1d89a2c692", "value": "12288:EqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TH:EqDEvCTbMWu7rQYlBQcBiT6rprG8aAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717155624, "uuid": "e52c3dc6-b154-4a70-a993-db892c2dc153", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155624, "uuid": "45d131fd-6a7b-4ab8-aaea-8a88458f2190", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6742361-1f42-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1717155739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155739, "uuid": "7d977e0c-6d95-476f-8969-7ac4008a9c59", "comment": "Malware payload (Adware.Neoreklami)", "value": "f74fcc245dd45e9616656097665698b9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155739, "uuid": "3a3a7bf1-8b6b-4ef7-9d3e-1fdc1555fdc3", "comment": "Malware payload (Adware.Neoreklami)", "value": "d1654381b2f43e13d88f2decbabe9695d09467fc26762f72f5dab3f43b0bd96e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155739, "uuid": "c70f8ad6-a1c8-4377-8f1b-7802be033703", "value": "T1E87633612ECA84BFD350D835FE181D5BC6B5EA218637E5AF1BD00B8DA27D8C29D066", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155739, "uuid": "2d166196-80b8-42a6-a123-a66f938b186e", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155739, "uuid": "ac7baf96-ec63-4802-9bf0-ae6c4d776c77", "value": "98304:91OcSuT3bGEkP48qJjFjlRmRO2AP6GDF+YMyaN5T5ofup136Xjdxv4sSaR2ho1Wy:91O/uLbGEkG0R5AZkNMWv36/bRFWod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717155739, "uuid": "174a795a-d472-4e53-bce8-cf8257c6e29f", "value": 7633109, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155739, "uuid": "dcc86b57-4ae2-43ef-90e9-8c72f2b6c356", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ad16fb0-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717155827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155827, "uuid": "f1fc447f-e451-4248-a94e-52ce8676b6f5", "comment": "Malware payload", "value": "05f2ebecff1fabe638675f9a08ed43c2", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155827, "uuid": "34a851c3-bc4c-4f6b-a7cb-b399c919ace5", "comment": "Malware payload", "value": "6305f80ca27f1d6d2be05bf5161404f82313d0af84d1882ed387508dc37a8356", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155827, "uuid": "6b3df299-ec34-47f1-ae2e-d3be09fded94", "value": "T19D16E043EF44CAAAC8BA83F16B770D996E170F04C642AADB4115767D2EB76C40DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155827, "uuid": "e808f743-39b2-4c17-ac18-66d0687cb521", "value": "98304:L/Sr2hkDOfo7MzkAmzJzBqTS0thZuI0NJA:ri2qAp0zeRfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717155827, "uuid": "296bcfcd-0b66-42a7-bf82-361f8b8d0a30", "value": 4297051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155827, "uuid": "35964388-b24c-4821-8c9e-6916ea3ce6ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717156153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156153, "uuid": "5c771e90-1026-4863-8edd-c3336724c25a", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156153, "uuid": "51d71e0a-7313-46f3-8f84-ca5e5c9de764", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156153, "uuid": "1cdb432d-0575-44ee-aba5-f5ed393ffd57", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156153, "uuid": "af80703a-6175-440d-8f9c-d18bc6b93143", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717156153, "uuid": "251b17a2-8372-4ead-abd5-ae07bc3e1e03", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717158237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158237, "uuid": "f03566f5-2f69-4e9c-9af7-552e5bb781fe", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158237, "uuid": "4842feee-2fc6-4990-a201-6858da4769be", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158237, "uuid": "0e24f03c-eb4a-42bc-84ca-525d8ec29775", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158237, "uuid": "53a2651d-a972-447c-b475-38608ea38321", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158237, "uuid": "a125c6f9-2a01-4812-8417-27293365a092", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2c7e5fc-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717158256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158256, "uuid": "16b7be63-c184-4b70-a1e2-42609a3e0515", "comment": "Malware payload", "value": "9db4969dd75601827d0681832fbe995b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158256, "uuid": "02b7ba84-51f3-4a39-a3b8-212ba59bad2f", "comment": "Malware payload", "value": "bdcee8982c14ad65ccff5526ee3383180e03c85715a0197bc2956c8584f1f796", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158256, "uuid": "e8211b56-864c-4d8a-8c7e-7ca370027b6a", "value": "T1D4B5336714702EE4CFBCCAB681CB2A1DD39555A441C4F67E2E47C2BC947A2D0ADE86", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158256, "uuid": "bf8575dd-f222-4084-98b8-5235b95ad61b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158256, "uuid": "b4ff9807-a834-4ea7-bf92-e4f540a70dbe", "value": "49152:N6SGaIVqWQZHGw1G5nnTNMqLHcssPcyfijK645Ocs2OLsGknV4PlSar:ESGaI0WQkw1G9jjcsEcyfiW64Mc3Glk2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158256, "uuid": "3e41fcbf-b645-49c4-83e0-af96bfa9ec42", "value": 2472448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158256, "uuid": "b21b2f1b-e01f-4ec8-b701-543f154a0b20", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "611f3281-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717158549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158549, "uuid": "ac3e3673-0986-44d6-bb4f-f6072ee28350", "comment": "Malware payload", "value": "07ad6f47bd8def713c67ba9d7305ac5c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158549, "uuid": "1d972e99-4cfb-4ceb-87e1-f354571dab5e", "comment": "Malware payload", "value": "f2c1e5a5e0f54043e2f6ee5a507f91f75695d3259f70cf6dd978e392eee42ec5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158549, "uuid": "2d0c52d7-08ce-4ddc-9792-3ba1d17a1163", "value": "T1A745BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158549, "uuid": "a110d3bb-b978-46c3-b91f-6aa0b79b6596", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158549, "uuid": "a0f8e3bf-cb20-490c-8667-ffa66c59619d", "value": "24576:pqDEvCTbMWu7rQYlBQcBiT6rprG8auK2+b+HdiJUX:pTvC/MTQYxsWR7auK2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158549, "uuid": "49c93585-937a-4b5f-aa7a-83686949b867", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158549, "uuid": "ac7b2130-c194-478c-b78b-0f83423aadcd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f2dc396-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717158573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158573, "uuid": "8276f8ab-f786-4e92-b39b-1210e7ee6aed", "comment": "Malware payload (Amadey)", "value": "384f6680bff4df95775adc58e13ab5bd", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158573, "uuid": "b2b55739-2f8b-4a67-be72-3c46bfc86d4c", "comment": "Malware payload (Amadey)", "value": "fed3e1158e650a18ec8a9aabf16928201953770eb4696f7ef14c9fd45e115b58", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158573, "uuid": "2d8bd40f-cab3-405d-bfb4-2a59a5e7c716", "value": "T13E95333685F79E66C07E0678FCE8EA8DBD324B5421D0413143F97DA8FE8E6C686781", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158573, "uuid": "11a1aae4-17b8-4ab0-bbac-3410e52fae1a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158573, "uuid": "bf5d52b5-30ee-4c06-9e9d-3d075885864c", "value": "49152:OYJngtehOb01A6EIQvLub1JjVQxUbX/Gu70FPzVSlCKl:Jgt90ErvLub1ZGW0FpS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158573, "uuid": "5c404ce3-6edd-4fba-adb0-7229562ee216", "value": 1930752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158573, "uuid": "d341ed5a-7c76-4106-aefc-1f7d5b4472c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72ef330e-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717158579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158579, "uuid": "c33dfc0e-d686-483f-902c-d936585a6155", "comment": "Malware payload", "value": "4959f64fc957260a064a297afa22f512", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158579, "uuid": "721a892d-762f-4474-bf56-6d134990a290", "comment": "Malware payload", "value": "000666231c228b240e475c10571b1b9a3522f750f263597df60fe27cefe055c5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158579, "uuid": "2f638669-3c4b-4040-bca7-86e80f9bdb0a", "value": "T1A6159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158579, "uuid": "4449de11-5ea9-4fdb-af88-b8b57c050bf9", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158579, "uuid": "8bf13c70-9fa5-40e5-8f27-ff16075049cf", "value": "12288:vqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TX:vqDEvCTbMWu7rQYlBQcBiT6rprG8aAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158579, "uuid": "f776cae8-4bb9-42e5-b6c7-52d971530cb6", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158579, "uuid": "db5c4ad7-5a0c-4d68-bbd1-408894eff758", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19cda09a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717158688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158688, "uuid": "ff68928d-ffdb-4fb1-9d93-5bea1f273fd4", "comment": "Malware payload", "value": "f83bda9693424ccae50b577d6aa9a539", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158688, "uuid": "ff6e7df3-4276-46eb-ae03-f45736d301e7", "comment": "Malware payload", "value": "92123529233d7536dde32a64565ed9ddb4ae5be40bfaf42d71eccaec4eab3fc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158688, "uuid": "78a0eade-784e-465f-a853-87f0f32fe5a7", "value": "80E2F28732843B63F16355F4F3BDAF87215A3D689FEE2427A441362270B311C658D82B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158688, "uuid": "94836fce-c763-438e-8abc-f09f7a3b7f9a", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi74:yYI0ARqw1qAEW67UIWi74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158688, "uuid": "098e1751-55ea-46d1-89a9-8aa461085fd2", "value": 33304, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee76bd98-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717158786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158786, "uuid": "eb09093f-f63d-43bd-8068-17683877a26b", "comment": "Malware payload (Amadey)", "value": "9f2f8eab49790c654dd41d04c422d704", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158786, "uuid": "0475004d-f25d-4c62-960d-17df9f0a15f2", "comment": "Malware payload (Amadey)", "value": "ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158786, "uuid": "0e0b42be-d634-4f36-a18e-aa216c128a1b", "value": "T1839533011F7B4976E335A5B0732E5A606331D575024B2298FC0FFA33D9CAAA43EDB6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158786, "uuid": "8d9bd27d-48f3-4e99-82fe-700e22cc4deb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158786, "uuid": "7d5811b8-1ae8-4a28-9311-9657e131db97", "value": "49152:T0Dq0IEAO5S5Rr+R3jcla3u19nugkSNoJUOGxMjW:T02C5S7WTqug9P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717158786, "uuid": "7e1cc850-6b25-401f-8705-99970f86bf54", "value": 1884672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158786, "uuid": "61ceb241-6402-4c6a-8171-6857d4d4ade5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a07c5cd-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717159124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159124, "uuid": "275f8ab7-7bdc-4310-b664-df3a5a1a20d6", "comment": "Malware payload (GCleaner)", "value": "9dc3f76bae48a8f7602b725f5fd7ce06", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159124, "uuid": "6180af94-f095-4eaa-b7d9-6d2210fc5318", "comment": "Malware payload (GCleaner)", "value": "dd7c1efdc750e2e27530687372220700df14db0b5e0ff40afb0b91f23eeb7e68", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159124, "uuid": "67b400b0-ff10-4373-950a-e7f84bea5dd7", "value": "T151649E53A2F1BD11E9554F33CE2FCAE8771EF9714E0573662215BA2B18B12B1DA233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159124, "uuid": "fbdf76db-0aa9-4eeb-9d84-c22afbe3ea5d", "value": "e9441ffec23b89f8e08ca6b5c500d8fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159124, "uuid": "0b33cdba-8e7f-4de1-b1bb-5f19e1c9c34b", "value": "3072:gYiuYbrWfxnSql2W4vtwsCss1YyX/I3oBXoD/hu1tN05MFB8sFB8Th:gxbqSq2W4FWX13u3u1T0h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159124, "uuid": "591ab808-60e9-4493-941a-c03e4f86dc8e", "value": 314880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159124, "uuid": "cb8594fb-df73-4ff4-b19b-24e2aad9f05f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4221f3-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717159162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159162, "uuid": "68e8f462-a8f5-4d84-bcea-d9ff068429c7", "comment": "Malware payload (RiseProStealer)", "value": "27be5a51f4afff7916015ed7f7d30199", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159162, "uuid": "fe11090d-1266-4cf6-9104-6a3ffd967739", "comment": "Malware payload (RiseProStealer)", "value": "e19d8921f927e459907c58cdf25b0196f5f73a4de794441f951fb269766b9906", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159162, "uuid": "9a1b49ec-a97b-43b5-8a09-4a325ed3b510", "value": "T176B533D302A52F79E14DCE77A2F5122431B42922C9069F33FC82B66D47766DB9CD08", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159162, "uuid": "5e17639d-0d41-4462-83b3-57511e212e2f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159162, "uuid": "e89cb39d-9d9f-4b40-b8db-6549d45a16cc", "value": "49152:/kmKhyq24kI3qebVae99udaKzseJ6e6k5BQCRQ9qjBK:/kmKEqlkAbkw9CaKzseik8CRUEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159162, "uuid": "974f065b-3fc9-4828-af14-29eda05bbcae", "value": 2347008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159162, "uuid": "2a67af4c-a3ba-4881-bf8d-ba02c32b54c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20063636-1f4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717159299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159299, "uuid": "ae675d3c-0c59-4029-96ff-424478b9d020", "comment": "Malware payload (GCleaner)", "value": "36c6be5b1f458dbd7cf12ffedcd87aa0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159299, "uuid": "998afb2b-aef7-4708-8b46-53a82eb6e76f", "comment": "Malware payload (GCleaner)", "value": "ce61a6eecf7c6e0c5e6337e37b036b28d39411e7d79e2f106e6d9a0da7bb1875", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159299, "uuid": "f4fac927-bccd-479a-ba3f-a686795a9c22", "value": "T1F7649F0363F1BD13DB514B329E2EC3E82B6EF9506E5573696204AA6F18B11B1C52F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159299, "uuid": "64eac176-bd8c-40db-b913-169a1bb20da7", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159299, "uuid": "3b33bc15-2098-4aaa-86aa-1191cfb86e1a", "value": "3072:cm4APAiYexSZMS9rf6AQa70bwFHsT1N4R6rGh6F3/j4MOnyPauLpG35Tj/IYE:paJ9+Ha5HsZN4R6qq/j4nIauLpoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159299, "uuid": "ef7ef1ac-7c85-47cd-b5f1-1795ac8a19b2", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159299, "uuid": "c5d886e8-7756-44e4-8de3-e63ee4436e89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6038e5ce-1f4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717159406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159406, "uuid": "00fba918-5263-49a3-b26c-4fb1e344d3ec", "comment": "Malware payload", "value": "a4887157e6a13b405a4b163905ad89f7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159406, "uuid": "942f121b-32e7-4f70-84e8-051772088647", "comment": "Malware payload", "value": "784f1ebccee3357cc7a6b67b6f46376185df75e47ee0d387c48ddd7090feb97e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159406, "uuid": "3ed3bb0c-8c38-43d7-9189-8bcac3dbbce7", "value": "T1F4749E4292E17C47EB268A72AE1EC2E8761EB4506F7D277621046E3F14B3171D12FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159406, "uuid": "a78fe187-6ef9-4f76-bb92-877e559826fd", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159406, "uuid": "7d01ae21-fcd1-4fb7-bee9-541a0975cfa5", "value": "3072:+HDC8fgkK7VSXOkMQGzU/TvdDKgu8rLxxXMra9RVCqeKRDWP58SuRJH5o9U9UL/+:+usgI2QkULvBbu8hxlV3eKAP5+yE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159406, "uuid": "72e14ae7-838e-4a68-b49c-352e40b40848", "value": 352256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159406, "uuid": "6a05781c-98c8-49da-a24d-53a75503c63d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23d3d25b-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717159735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159735, "uuid": "ee99dc21-8754-4053-ac8e-35c39f163e6c", "comment": "Malware payload (GCleaner)", "value": "d030330d8b024d1325ae453832219a27", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159735, "uuid": "073d3b56-1344-4b7b-bb3f-280193c93204", "comment": "Malware payload (GCleaner)", "value": "7000bdbb1a9c842736136f3e316284e77d5eb27b8b83c01ca9f25cb67575c35a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159735, "uuid": "20aaad50-d648-4d6b-8818-5037f951334d", "value": "T16B649E03A2F07C27D7654B319E2EC2D8371EB9606E5977566214BA6F08B21F1C62F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159735, "uuid": "106c18d3-7e45-414d-a704-3704a24a800a", "value": "9747562e85e9e86675ff7a630e1bdceb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159735, "uuid": "8d6b3862-b2ee-470e-8d4b-38dd46ff8038", "value": "3072:tCdYo6ut88OJvSeCWOKR5qPmzHZ6u0EF82krmX1CDCzlTDjiX5uYHYr/IFbE:9Lut8RYWOKRo+zIu9mw5ZfkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159735, "uuid": "1a961186-5657-43a4-a5fa-da6f6b1f8e14", "value": 329728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159735, "uuid": "bc9c0cf1-dee5-49d4-91bd-d89bb6622c01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44de9a6f-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717159790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159790, "uuid": "e16dd1dc-5ed0-42c5-a63e-996806c70188", "comment": "Malware payload", "value": "e635f4bd364c99905a6eea6af8d4f82b", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159790, "uuid": "fab95250-ad05-4b90-a039-d943ddfa7447", "comment": "Malware payload", "value": "13921942410eefc2190530d483da5dc6ecb4652a04d257ea97bc086a86040ca9", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159790, "uuid": "b7fc0dab-11e3-4256-9012-e1c64303a500", "value": "T1FF56F103EB84DBEAD9BA83B26B370D992E174F14C6429ADB4415767E3E771C00DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159790, "uuid": "5df181d3-05dc-4eb0-bf55-ca89cb8ed789", "value": "98304:nIvwkHC0WcxzRyEBzmzhzBaTug0txO5K6UKVgY0fmh6UoS37w:I7yissyzGuLSK6bMT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717159790, "uuid": "07f05f0c-c4d4-4e3f-861e-989b494cd7f0", "value": 5923163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159790, "uuid": "ec7acb6d-e961-4a1a-a8b8-3db6348b25bf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55aa9a03-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1717160677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160677, "uuid": "663d315b-ffe9-4c0d-bcd0-fe0a65724c97", "comment": "Malware payload (Blackmoon)", "value": "1d05b6ed6374872c475ae66ffede880a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160677, "uuid": "6f0cb9ff-4915-4fb4-874a-1dba9c5cd5e2", "comment": "Malware payload (Blackmoon)", "value": "acea69905d1804b70a0e03443ed39fa974cf5edd2e29aef082d08f63c5a0596d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160677, "uuid": "acb32fd9-d474-4a2f-ad29-6e0e2d8deaa4", "value": "T1CA355D23E120C853E05516B22DEA0B3D6DB9937128B58E43FBC8CDF5BE616329F5A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160677, "uuid": "767d6e13-f581-40e5-a6f3-fffddade4677", "value": "cf80ca126980129144154807c72c9042", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160677, "uuid": "f8d97b86-455a-437f-bd48-6eff3d2fa21e", "value": "24576:jblk2CHkWzoAeWcc7oQMXL6jsbXCUP6G7iH7r27XZRWgMubw:jblk2CHkG7C/NlRWgMubw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717160677, "uuid": "85666196-98ad-40e6-b55e-5177c173cb1f", "value": 1140736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160677, "uuid": "36d895cc-1fb0-4f3c-b7db-85796e24a537", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "764f9e15-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717160732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160732, "uuid": "37eae125-85ed-4c39-9cb9-b651a77d7ecb", "comment": "Malware payload (Stealc)", "value": "841d16f38da7be75002d18ab91956a82", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160732, "uuid": "a4fdac7a-e8f2-4eb7-8b3f-fdfc3d3fe1da", "comment": "Malware payload (Stealc)", "value": "abd2080f2872aa39aed3f285fd789e5ce3174dd876578e6cd1bf50b062cc1b98", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160732, "uuid": "f9a47002-4f00-4244-b313-3625617fd86f", "value": "T156446D5253E17C4BEB668A729E2EC6E47A1FF8806E45336A3D046A1F14B11B1C11FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160732, "uuid": "1a4598f6-bbd7-425c-9535-0427b5846e0c", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160732, "uuid": "bb591b06-a783-4303-a1ce-78f08072bbd5", "value": "3072:EyG/yqaJPS2F77upqEdEXMT4H6+sWJqaUSX5IweH/IYE:Ey7qaRLuEXyQ5JZ2E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717160732, "uuid": "b84e13b9-8817-4f31-9f4d-e1d17db7a61c", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160732, "uuid": "d3348807-18ac-4ca0-896c-e439e5e55c3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a680b74c-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717160813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160813, "uuid": "50f5b3ba-8a62-45d0-8444-2335f7ec2849", "comment": "Malware payload (GCleaner)", "value": "e76b0da11146edfc62ad21ac4e416944", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160813, "uuid": "c87c94a7-cbb4-4f74-a6ba-f665cf93f838", "comment": "Malware payload (GCleaner)", "value": "8bbd1dcb58b40d3eed6eee50d5366b354dbe967f1991c1f94804e1b843532717", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160813, "uuid": "67c3320e-da31-4a25-98aa-6716e889ac00", "value": "T1A7548FD292E07C57E7178A728F2EC2E8372EB9A4AF4967F621045A6F04B11E1C15F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160813, "uuid": "6ec1c622-eed1-4e9b-af9d-bc5c61685704", "value": "9747562e85e9e86675ff7a630e1bdceb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160813, "uuid": "60cd9401-7528-412e-a859-83a82dc234e5", "value": "3072:2+zaGL2Ti0c+9mbx/+jIzHtEsI16ibNYZjwqtJLGmCrGdUt5Bt9tr/IFbE:GI2TPcjFeOHxI1NbWtwKVgrAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717160813, "uuid": "148c0687-d2ff-4ce0-8006-7b980054d999", "value": 295936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160813, "uuid": "522d81fe-fafd-445f-a094-3667bff5a229", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1749e715-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717160901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160901, "uuid": "e3e2b852-d1dd-4eca-b4fb-40c2b1b07967", "comment": "Malware payload", "value": "599d30a7ec6c210bf01e09e2b5fa1fa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160901, "uuid": "09749e92-ecb5-461a-9e6e-7431c3cf8a39", "comment": "Malware payload", "value": "34b6c6241907c842b65c9a691aff7351e54332f9501d85cefa372e609b5e3bfe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160901, "uuid": "6dda3b7e-ad00-46ee-a10d-b36bd099fdfd", "value": "9CF2020732953B23E56249F4E3FCAFCB615A7C64DFEE142BA4513A6170B315D28CE816", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160901, "uuid": "a10c483c-e765-46f0-9690-2c80d627a282", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghP:yYI0ARqw1qAEW67UIWi7M8g9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717160901, "uuid": "caf96cc9-440e-420f-a05c-d6d2f2f4e45e", "value": 36200, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f65e3d38-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717160947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160947, "uuid": "19a29396-9e98-4fb8-9742-f75f29c07fe3", "comment": "Malware payload", "value": "665938eb291d14aee3f1fb28bc100c5d", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160947, "uuid": "c42a5c13-6c84-45d9-8d81-d0061d157299", "comment": "Malware payload", "value": "99e9a0037319a46617133a5b1b683ad59d0088c949bd56806fde4ebdae6b2141", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160947, "uuid": "db6a76a2-8518-4b6d-9bb7-e060da671f57", "value": "T159E3024DCF1D101A87CBC88A5A5D984171DA891D7E615C0B55C0EAEB0BF72F73F0A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160947, "uuid": "2ad998ba-b95a-4ba1-9972-e62dc44e5d4f", "value": "3072:96NeRozbdaLqrfeRcI2pneon53l7gZIIfqoupzDjv+qFt:sNe0R/rfeRcI2Bd53l7gZILoupL+qFt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717160947, "uuid": "7b0f8f78-35fd-491d-ae54-f72c80a63e17", "value": 156224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160947, "uuid": "6f1869fb-86c2-4a22-aebf-a08b404b63f8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70992801-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717162870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162870, "uuid": "35efc69d-50e8-486c-9cc9-4ef903b4b0b6", "comment": "Malware payload", "value": "3d996391791111e82e3300e1baa6ddb7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162870, "uuid": "44fd586e-57ca-4c6b-835a-4e1a13268dd9", "comment": "Malware payload", "value": "1cf3753e2489cce7cfe5cb87dfd9825eab65104064f212245ce101728e205997", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162870, "uuid": "6a4d2166-9f28-4478-99fb-35eef2a20799", "value": "T1AED5BFF9BCB34876BB6390869A3D918498C2F057E21376566EC45CAFFAC01BEC1D58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162870, "uuid": "2231dfd4-519d-4dcb-9261-15279228ad38", "value": "49152:BFhxnGG1GBHUnj+chJEBHrpXeS9Z/w7Urgeqyp0EF4cIEtj:RxnN1GBHUnHh1S9Z/gUrgej0EF4cIEtj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717162870, "uuid": "6dbcebc0-2969-4593-8ad9-3c8354c47b7c", "value": 2887172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162870, "uuid": "30e4c0d8-b733-4637-8ba9-2027e58bc6d2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b699ec21-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717162987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162987, "uuid": "9f1245e3-5cee-4fcb-95ba-bf494b1280a0", "comment": "Malware payload", "value": "cccc356f297f9b0f6ec6082220899b2e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162987, "uuid": "be7eb69c-208f-4d03-ab59-69ff783e3ea9", "comment": "Malware payload", "value": "690ae9902aaad1b2f7fadd74ddd0c1f8f8026d9e003a416f7d41720b8e3a9cd0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162987, "uuid": "4ba8d7d3-975b-4d15-b39c-0a55f8a7b97f", "value": "T1025633CD889119A79BC636DBA90D7C272A815FB2C3A0F3C09E5EE4132DB49767158C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162987, "uuid": "f86a8f78-0ed7-4f2b-9a4e-ef591dab17c1", "value": "196608:QpST0pSTuQ6GhjNEAsxdQ9TYLEvOr6HGiJQkFtRImnS:bPHjhKrSIKK6HGiOSrS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717162987, "uuid": "470fa92d-c312-40e4-be85-54ce0cf8050a", "value": 6432081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162987, "uuid": "3f53a74d-c3a7-4e81-a990-2c0eb9d334fc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f885b324-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717163527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163527, "uuid": "1e489745-158e-4484-8321-1aaab0bcabfc", "comment": "Malware payload", "value": "9d987b9c7eb0d86e5197a6aaac0c159a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163527, "uuid": "2683fec9-4611-456d-a27d-99a7e58f03c5", "comment": "Malware payload", "value": "0ca3f512a1d768b41aea280ca4e4622254c8df0b59b7f77f2e45e501a71382f8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163527, "uuid": "e8210ba0-7b65-4dca-8c25-ba87fbd299ff", "value": "T1FE159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163527, "uuid": "55cd2ee9-b102-40ff-8db2-8faa857f2de3", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163527, "uuid": "bdcab039-40a4-44b6-9ebc-1e64e5738fd7", "value": "12288:bqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tx:bqDEvCTbMWu7rQYlBQcBiT6rprG8aAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717163527, "uuid": "c0a1269b-e25b-47fd-b548-a3d4ddd2c0b8", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163527, "uuid": "a3f632d2-0d23-4452-be6c-6f16594796b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231b804a-1f55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717163599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163599, "uuid": "18c37df6-2f05-49b1-92f6-babe01a1056c", "comment": "Malware payload (RiseProStealer)", "value": "0c8103aab828c1519a5946d2c5bb9e92", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163599, "uuid": "5ce670e3-793d-4d36-aa09-5ff7a3fae394", "comment": "Malware payload (RiseProStealer)", "value": "c576c6dd65a1b08defb3534550b4be0744d1078ed24347814e04a2827858659d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163599, "uuid": "da705a29-1c8f-4fc4-80f8-69ce5e8d1766", "value": "T194B533D3DE7FAFD5EC9E09B3DCF157AA1268A0804E4B0C727A4B12452832DBE55E05", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163599, "uuid": "5d935726-559e-496d-9915-07c258e76db7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163599, "uuid": "d0a95514-d5af-42f6-a40a-eb05cc10533d", "value": "49152:TkmKhyq24kI3qebVaOsQlpUUJERgVFzBNjy2qgpNrCJSO3km3b:TkmKEqlkAbkOhKJgHo0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717163599, "uuid": "5a6dbb46-6c30-4e7c-9c06-e0ee63312f02", "value": 2368000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163599, "uuid": "bdaddba4-594b-4d40-a03f-add35be3f48c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a58cbd9-1f55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717163692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163692, "uuid": "7d00e017-811e-4bf8-a969-f94a02bb24c9", "comment": "Malware payload (Amadey)", "value": "85685722c327b96b1798ce043093be53", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163692, "uuid": "7a545808-4b1e-4865-a8de-529063925f63", "comment": "Malware payload (Amadey)", "value": "9dd2bdedf184be5daf252136d7ad21df1d1b2f47f407377350c9df98af5eb6be", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163692, "uuid": "6c66a4d6-de3e-446f-bf9b-5d45921d69ce", "value": "T12D95333D7B232F83D60C4A774652A84F98329E40867B847D4B1DC73D81DBEC2652BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163692, "uuid": "5bd4cc75-d69e-4771-aa42-c2a300a142f6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163692, "uuid": "93da8f56-1c79-4bba-8379-b9edb989847b", "value": "49152:BsC9Exk3BF4IsjmAd4ucNIYORmZygzNEO4uaaJSs:Rwk3BFsjmAyuceYR5EO4uZJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717163692, "uuid": "43e64654-b98a-46c8-b12f-a646a8b100ad", "value": 1966592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163692, "uuid": "d8bf3fda-70dd-4380-8006-f4bb7083e929", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b506fb9-1f55-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717163720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163720, "uuid": "cf61ac7e-a52c-451e-8ba3-7ac6b6d6618a", "comment": "Malware payload (Amadey)", "value": "01386a384d59a5cb4de6dfe918bd123c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163720, "uuid": "530c8267-14dd-46bb-81d0-67afa8021240", "comment": "Malware payload (Amadey)", "value": "77c9582b2c84088f55fdecd1e86356dba6b514e6fa0f699a4fdca0fb805f6389", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163720, "uuid": "0c158944-0f58-4af5-8ae3-238152711162", "value": "T1AC9533C04A170F81C4756E30899D6AAC053882763751CEF39BBE1CFD3489D5EE4F99", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163720, "uuid": "23a2d3ed-4845-4d8e-8e8a-3567e23c0df9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163720, "uuid": "24f818a1-ecec-4658-8c33-9c54265c442e", "value": "49152:NMtxvVNPBmkX+9Tevor5zyqbwr1+OeNWcg/mF1FOwyUS:GxvT5mkO9Tev4Rbww9AoOS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717163720, "uuid": "7638553f-741f-4a0a-b432-280cdd60daf4", "value": 1918976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163720, "uuid": "4b306471-8f6c-4bf4-8289-64f3968a4003", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d9056f1-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717164100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164100, "uuid": "ef8bb98b-6aaa-4dba-9e09-7a6fac43a978", "comment": "Malware payload", "value": "694b3ffbbe09cd929e2a1f4acf90bd2a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164100, "uuid": "2060e2cb-1463-43f0-a802-efc3614d787e", "comment": "Malware payload", "value": "a85808ba0a31dba7171686231ae308ff76dd9d00211003fae2c6edbb50105777", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164100, "uuid": "e9880555-9082-4891-9a9d-22a433b726d6", "value": "T1CBB533A614E2626EDABF5B3FFD07E50E19E4508D0F3F912A4E1AB22074711AB3D458", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164100, "uuid": "cd09c0c2-7a01-4200-beb6-dce628e1330c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164100, "uuid": "88197e91-6659-471a-9d69-175a941ebd64", "value": "49152:bUJFhsitrn0BtmxyGYMuKdpUySzCbm3GCBJiZs+O:AJcOQBtiucpgmbqGCBR+O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717164100, "uuid": "1aa8313f-3adf-4e8b-ac5c-5d6305b3ed47", "value": 2422784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164100, "uuid": "094fa8a2-5491-4886-8fb5-35436a046256", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07fdcd80-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717164842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164842, "uuid": "769f5444-2ee2-41f6-b174-01d987e12c71", "comment": "Malware payload", "value": "7664a6f1af305d56783058a951c632fb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164842, "uuid": "e0ca3e8b-1648-4438-9ee6-30230286de80", "comment": "Malware payload", "value": "eaaa7474368e9fd8fa1cc9fdead4f955a4cd560c9242aec1de2bdc6a0539cef9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164842, "uuid": "9185a29d-a264-4216-95d5-56a15e98740f", "value": "T1B045BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164842, "uuid": "64bc2550-ea1d-46d2-a833-69f2dffba93a", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164842, "uuid": "1571a4ee-95f7-456f-9fdd-9f218a1292c0", "value": "24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8au82+b+HdiJUX:+TvC/MTQYxsWR7au82+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717164842, "uuid": "2c32ff00-e463-4ed0-8690-0f35da88ac06", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164842, "uuid": "165d9c5c-fb42-43e9-a8b9-507d98ba3ee7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1af09baa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717166109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166109, "uuid": "0111794c-104f-4d11-a2f7-77dfafbe6de6", "comment": "Malware payload", "value": "ad15e941be7a0e267947c6a9fa9423dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166109, "uuid": "17a634bf-fa1d-496c-9f56-f794ef43aa4e", "comment": "Malware payload", "value": "0c8555271eb8e5ec0a17685fff0af8fa9c8ffc8b3a5e5b1affd1772db0d9e5f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166109, "uuid": "40d6c65a-16f6-4fd8-8555-2822ba12eec1", "value": "A4F2F14A32D43B33E56248F4D3FC5F8BA15ABC24EFDE242BA4113A6170B225D24CD81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166109, "uuid": "1be9943b-0c32-441c-ba82-7f7dd1f5153f", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFk:yYI0ARqw1qAEW67UIWi7M8gA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717166109, "uuid": "988bca44-d66a-448d-9b73-8789eaa61052", "value": 37648, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18196a9b-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717167875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167875, "uuid": "c53cd1cc-5510-42b5-85f5-78f466687503", "comment": "Malware payload", "value": "11a5ef24b4b2f7654e0f3090f9d19cd6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167875, "uuid": "bd85af28-0fa4-409e-bc98-44c0b8f18b8b", "comment": "Malware payload", "value": "d2898fc81f32bc0bbff916771c9da04a944a68112fffa81063cf15ccff3cdad2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167875, "uuid": "baf3f0a1-01ab-4780-856c-9c379e5130ba", "value": "T14BB53321876AC027FEF45DF4E3B41001DB79B3945DC3A6A82BC7581C0EB6DA99D97B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167875, "uuid": "18570ce3-2415-45cb-841f-147d424d177d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167875, "uuid": "5261eb0a-cab4-4677-ad69-f24694f4a6e3", "value": "49152:sPkFTXVtc/29KbNUYDX5WbLnwLrvbyDCZPN6dTrQzj8oAd/P:bFTXXc/PZUYtWnnArdQKX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717167875, "uuid": "41c434f0-a244-48fd-8db5-ba64c888b483", "value": 2428416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167875, "uuid": "2f85a2d0-236e-40a5-bf34-fa9a1bfe9616", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd8ba03-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717168043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168043, "uuid": "22bed60e-7fd0-41cd-a88e-d409e23d2e77", "comment": "Malware payload (RiseProStealer)", "value": "b829d4132bd0e98a0c6366c85103bf4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168043, "uuid": "9fa067ac-5c04-4d83-9d75-77928ac23a83", "comment": "Malware payload (RiseProStealer)", "value": "0036ec18aa2f364e17a31ec4e533908b3ad5cff994881148ae0b5e9744448e86", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168043, "uuid": "5c653685-ec36-4ae2-b16f-f14bc532974e", "value": "T1A3B533A1C97D587ADCC94CB36CE0036A15B61C745A676721FE8FAAAC07233CE7E506", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168043, "uuid": "b5858653-4986-460a-9026-466e7684b8af", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168043, "uuid": "d50199d9-aab6-4989-9f0a-d17939270c9e", "value": "49152:vkmKhyq24kI3qebVavaH89e1v926RpOjdxRr4AvOuV:vkmKEqlkAbkix2+OjHRr4W/V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168043, "uuid": "ffa03d0d-13b4-4b55-a9b2-2fdc80b399a7", "value": 2320384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168043, "uuid": "32b7cd68-7262-4d1e-9506-64c1170bc815", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9881dbdb-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168091, "uuid": "e4780a13-68fd-467b-ba44-90c3da402538", "comment": "Malware payload", "value": "8ed71bee5ef7f6d52fb320a5407b9e80", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168091, "uuid": "dfcd4af4-4ce2-4a2f-b86a-03096b8628b3", "comment": "Malware payload", "value": "a7917f04bc559887f3e362b2658269268db43435768a43466067c2104d1dca79", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168091, "uuid": "2f4daa02-c415-422a-b8bd-be36ef9fb6ab", "value": "T1F3C5BFADB8A354797F43B087997AD2489C91F1A6E2133A076FC47CAFF6D14BEC4844", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168091, "uuid": "d9d9d828-b3f5-423d-bdb0-ba8e5e2b41eb", "value": "49152:m44/7sUu/m45bUAJFdNI6iDnkxceaW64PHFsafrA:m44T/u/m45bUAJFvI1Dnsl3HFsafE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168091, "uuid": "ea13bb1f-0441-4685-925d-c73df79e68ee", "value": 2617348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168091, "uuid": "fa8c6c41-e9c0-4c13-9a23-0cbc7c64f84d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8e15056-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717168199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168199, "uuid": "7954c421-c8eb-4e01-8c64-93bfbdd24422", "comment": "Malware payload (Socks5Systemz)", "value": "1e44c054f8c676e87c20cc2e60aa4d43", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168199, "uuid": "c7f03cc0-e167-4043-821c-5be588df4263", "comment": "Malware payload (Socks5Systemz)", "value": "629a7daf82513bcf794aa8aca517bd3e1c6c3023212aebb09b565ea5e634016c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168199, "uuid": "44ed3e08-8ca9-4a1c-a30a-4589d9b908e0", "value": "T169363387D6549031D990DD7E6D670854863BF60F3324308E3510E6AFBFA3A61EA8D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168199, "uuid": "af2b0cb8-b1b6-4433-ad0a-733f3fe6f2e5", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168199, "uuid": "d4150756-c95c-4546-a017-2a5542ea2d0d", "value": "98304:mne2eIdS4KWwHF6gyhMrZV7yjduvPI4zyWxfGIwtyGUWO:Ke2eoKncf6rj7Ad0CWRnwQAO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168199, "uuid": "64e14b8f-3ec8-4ba3-ad9c-a08b64686de6", "value": 4997277, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168199, "uuid": "8f2e2e38-68b1-4ac0-b49e-d90c6d05aa9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8a2f658-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717168252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168252, "uuid": "0a9c6beb-8672-4414-b481-eca93de29a66", "comment": "Malware payload (Amadey)", "value": "d13cde2453b4fe79a7785dc352a2d0a6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168252, "uuid": "928d8753-81c0-412a-b711-3af4c6df206e", "comment": "Malware payload (Amadey)", "value": "811c8343d58e3509050e6f0e425ef45e8de4a60f5a626556cf5cc672db9c1315", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168252, "uuid": "aeabe5ac-5b33-4218-bc6e-a09d614b3d15", "value": "T129953345789ED99AC0C65F7643F70456EC27438F958ABD200E8F3A3A910352DA87BC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168252, "uuid": "bd0e7cee-32e6-40b6-bee8-5fa20e4cae6c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168252, "uuid": "a081b462-aee8-433f-af47-7810d8d15a1c", "value": "49152:AH9FoOGXZlwbWQ0n2acH2ZArHHlDSgdzOQfaoYkv5I:AdFF4WiQ02a7ZArnEoSQfaoYkv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168252, "uuid": "999c1ed0-5268-4c67-bca4-ebc972bb0807", "value": 1892864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168252, "uuid": "a9215178-075a-4831-9fdb-621700decc3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33f5680b-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168352, "uuid": "7466c667-2ce5-479e-be71-1f4df1c6daf0", "comment": "Malware payload", "value": "adf5adfae118dabb87818f625502d0d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168352, "uuid": "5b102c57-0a94-44d9-a8a5-e6aee35a9f76", "comment": "Malware payload", "value": "db0b0c8df1b2f39d7c228806198fa2db5b1bc2fe8bfdbf58ddd9db95f2cf9463", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168352, "uuid": "34606e52-a86c-480d-b299-578ccd7af349", "value": "T10E17333FE224B1BEC01B3E71797AC27D89376E6B75064D1943F0D90BEB361A41E2A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168352, "uuid": "6e6d11ca-2051-4fa3-97f4-3e2d27113f74", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168352, "uuid": "e6745869-341f-473c-bc49-4f95b62af731", "value": "393216:LXIuYaGoQdf31uz79uPquf/4LO9Ga8OB6wiAuOL+lj3lT:LXIuYaszIsqo/4LOskB64uOiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168352, "uuid": "ed2b3041-53f1-4809-a3db-f86f52e34f25", "value": 19142832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168352, "uuid": "bb1f2e9b-d441-4831-a55e-4e4af765ccfd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb966e8-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168366, "uuid": "39458e63-e7e4-44a7-87b1-6bb68fd6148c", "comment": "Malware payload", "value": "b94e4bbad2ed73c168d56c5a9bf0e4ef", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168366, "uuid": "b78a270d-9fa5-4914-a9ac-8d88d46efdbb", "comment": "Malware payload", "value": "c369e5cddda3bd61536936e8931e764094fba53d62a657c06c7825c63a5d8d70", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168366, "uuid": "d092b03c-1e09-4d28-a338-74cc7f1bb41e", "value": "T18B26F113EB84DA96D8BE83F56B370CA92E130F08C6529AD705157A7D2EB79C10DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168366, "uuid": "f3f9945b-85d3-4758-8327-27567334a668", "value": "98304:bjegJ7JfqFncwP1+Akcmz5zBvTs0thshcVDg7jjgxj0l:bjT7AlRNgLzH/GhDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168366, "uuid": "ff2e6245-2e82-4c33-9b77-0078c896b54a", "value": 4583767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168366, "uuid": "ac8dfc6a-552d-4775-8d59-452a96e31892", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33117f22-19be-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168400, "uuid": "31c4b24b-bbb4-4f31-9da8-8583e1937d7c", "comment": "Malware payload", "value": "dcbf3de02ba5f831bc666104f0b2e0dc", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168400, "uuid": "c21d94e3-04f0-450b-8dca-3796b03aed64", "comment": "Malware payload", "value": "4b13da4e7332fb1ddee03a64cbc451140bc3178886545fa19c19b709adbf163f", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168400, "uuid": "9f6c086d-4d3b-4eba-b487-142c387527ca", "value": "T1D948332BFDAA5243E0579C33B671433286293D34AE06C8662781BE5AFBF34D4C5B44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168400, "uuid": "ecd9723f-2678-4aed-9032-89c4a2ac6ce2", "value": "3145728:f4QQQ1Yl/vmLuMqq/7PnRO9d1HzkoBMoV6IQH:fHQQqtvs//7PROvNkizU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168400, "uuid": "36365c21-fd00-4a60-a7b4-663a4acd7f80", "value": 122200828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168400, "uuid": "e694732f-1aed-4788-96a1-d9449274ee7f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d87778f-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168421, "uuid": "dfb24a3e-b0e4-49e6-9f48-fd2243bf9c20", "comment": "Malware payload", "value": "63fd5c88c847c75b23de62891bee47f0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168421, "uuid": "5773c527-d18f-4131-9199-498391d8f84f", "comment": "Malware payload", "value": "db786a32cb0984b18583bd83437886e16d0e79362f4a53c9b29cad302c6bf5bc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168421, "uuid": "1feaff22-c017-4123-9ae7-0cc0b2e12b6e", "value": "T1CB45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168421, "uuid": "8ac37d3d-b69f-46c1-b42a-68badd28609b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168421, "uuid": "fbb93391-0ab0-4641-8bb9-35843462d550", "value": "24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8auT2+b+HdiJUX:LTvC/MTQYxsWR7auT2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168421, "uuid": "d12b05b8-47e9-43b6-baf5-923594a7cdc5", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168421, "uuid": "a3664dfb-2692-4c6e-8c6f-9ddfe7f60c7e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940ef137-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "22c7e879-1a67-4054-a95a-bb1fe5b29e52", "comment": "Malware payload", "value": "3c12e176b9063abf5bef346daf7e5263", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "f3fda280-b59e-4884-af3a-c7a2dc5d2415", "comment": "Malware payload", "value": "797f37d3006ba844cc95066bb88fa3698117b0fe96e81e371e2b740c8be3765e", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "0ce56a42-459d-4d8f-81d3-f69b48238f3e", "value": "T1E3A402F3EA021E5E8DFC1600F83CE91EBF827A9B15A72995DE09AC8E7C447C518C5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "6b0b0661-618c-4e1d-8b3f-41a19f968fdb", "value": "6144:ZurPYDsolCQ77KnZeX9Hx/BeOWsLFdZqdlaRKKepSNVhTqUfZl:aADsXDnoNBB+OEiepSNVFfZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168513, "uuid": "a2e45866-a2ed-4c6c-b5f0-99aca050771a", "value": 460580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "0d26cb98-19a1-4704-a14c-605abb607953", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "941b460c-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "add4bde6-0999-458a-a5c7-ec5284022087", "comment": "Malware payload", "value": "db9a0d26613a7b236a11db29a67b2a8f", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "0a58dfda-3d03-4b1f-a46b-6b11f8ab14cf", "comment": "Malware payload", "value": "c52e2392e8890c5ef96b91ec7d80bc6f948b2f04b6d3b49e6f0a3c59f9fdef2d", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "1de5ab16-179e-4fea-8b29-a5514348dc76", "value": "T121A31265BE6945DA744CDCC665788A3877531ACD0E4F88E21EEA07C3C8032FDE181E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "fdf1348e-c2d6-4335-8aed-8c4424e19607", "value": "3072:pXkSVT0Cr+S6LH2MaQrNXD9RrtwXBoanO:pUSgS6LWMbNX5Rrtwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168513, "uuid": "8d1e5588-a915-4db7-a4e2-c3bfabd3d151", "value": 106560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168513, "uuid": "0e6aae8e-5cc9-46bd-afb9-066cc743c77d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6585179-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "95301cdd-6a01-4268-b331-c006269aaa27", "comment": "Malware payload", "value": "8b49f494a0d63abe2c28e471fa14cf82", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "629335e2-05bd-42db-9829-b8c3dcecd24c", "comment": "Malware payload", "value": "ac907c75d12d56ec347223bd96b10460ea21800730a9391c472629839ff421b8", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "fe4af403-7d35-402b-9166-3d97f9cf5472", "value": "T1C93412A9D2859EA5504F11E6E871B8C213A312DCC0BF0D81C56BDAE67BE482DDD01E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "60c65be0-1d37-44a2-9792-ddbe163688e5", "value": "6144:gsDsKPpZ/8ZaFJ5JgOolBr1yrF0tCLyTrOX63Q/eBzB:DzSZ81g1ltFTi63Q0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168570, "uuid": "4c142d77-ae30-414e-b198-4378c3a55f41", "value": 242752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "4e959cef-2640-482a-bca4-163e8cc085f0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b65a92a8-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "e762fe08-5eb5-41fd-8327-db6bd4a741ea", "comment": "Malware payload", "value": "8d6da421b6cf09e8e150250a4d398076", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "25a46085-ceda-41a2-a4c5-9a59c84cf4ba", "comment": "Malware payload", "value": "4135f1c9f81abb6d5d4431df06ad90632bcff7e924def78dfb0839ea2513f504", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "c1b0eb3b-d091-4ffe-9d43-821868afc0b4", "value": "T16F3412C85BF7FE116853890B61ED150B9C670993174293AFB9C815928AF36F2F12B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "4feef2b9-6038-4d2c-b359-c5a4855cd1d6", "value": "6144:1euKgEG9BDhL2mxZQguoRUUtlytlQlMEmSxrZlgKUeB+a:1BK29BD5lZYGUIlyt2Wch6a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168570, "uuid": "b6020fed-d289-4c5f-a49d-b08ffb486393", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "7ff9152f-700e-45ed-a7ed-b0e01cdc1563", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6601d1a-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "7b7a23cb-7b1e-4ebe-9cb2-6d90909e568a", "comment": "Malware payload", "value": "acd0dbdaa9ea20515b83988a8ef781f4", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "fe6800cd-aff2-413d-9a3e-98bccb5e507f", "comment": "Malware payload", "value": "ab3e89d0d5be967dea6913e3981261c865c842b4ec43dc2619c39805cb22ef70", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "89aa75dd-53a6-423d-b0b0-f25b8a2c3151", "value": "T13CB423D3D32CE79D5613D354F5B20A7B35A8473A928929F1A6ADC5C22442E723822F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "76797e7a-8449-45ef-ba67-a3ab927f082c", "value": "12288:3EErfU5U+aCYpsXFH3Gnm/7LxVSy5QKhasVckKkeSYGFs2w9rQ:3T5fMFH3Gm/7LuKIdk57fFh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168570, "uuid": "df87efdd-284f-4419-b627-9f7f737f12dc", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168570, "uuid": "d0209aa1-0d55-4199-b895-9b5fd264bb3b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b68d1aac-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "81f615a8-11d7-45dc-a265-64a7fe9108cb", "comment": "Malware payload", "value": "905eff8fb0491b950f100c359521cca1", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "f53b8f5b-8d77-4e91-a0af-7f5adebbff7d", "comment": "Malware payload", "value": "2acce1a900a52d0d7e08772bf70aec17a7d22260deb6a5698f1b29f315b5bd32", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "b6318fbd-8465-482c-8a82-0fb608a39983", "value": "T1C4A4ADE3E9121639EE5C605584117EFB5EB036EF21A079BC9A6CF7CC70A0DF129991", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "73f3522f-460a-4d9a-bb03-956b841860b5", "value": "6144:mHuU1RoZlH7ZDSjg3d1YaFGPVKAIhBwIgsYoLPxFLNUeESu/HoZ9JpKN2v:m9zA7ZrdaayYAa9PY+PrVRZ9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168571, "uuid": "8f2a79f0-8eb7-4f87-b5c3-f2e14be8e9df", "value": 463368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "99f9788c-f997-425d-bb96-8ec6b7b69df8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a38337-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "404f10b4-8578-46cb-a805-ba944c71383e", "comment": "Malware payload", "value": "40e2726e856af20f6273da18979ccf81", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "230a4daf-9eba-43cf-8a09-80e79966049a", "comment": "Malware payload", "value": "7e4be25568094c695602683c645d736d20141d8074f0136f89dad8f97a5294e1", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "262e205f-4981-4867-928f-f3520c6c5b32", "value": "T1BAA478BD37BCFDB8A8264F44B8B5366A1D0CF9173C10B359B905246D944CBF6A0D09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "d156d8ce-9eb7-49c0-8130-e1d0ccf32399", "value": "6144:QWoFhxxr7oze/EjdVPlOhtrBc2EjLlr4hc/pWClsx64m8nVoqyziAn:QWoFLd/ohlTZ4hcR78m8nVoP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168571, "uuid": "cbdfcaa0-7d4d-425f-9009-5b6df14b73b4", "value": 492860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "b90b022a-7677-43a2-a317-f3c3b952ebfc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6bdc661-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "ab4247bf-04d7-4662-8865-6fa24c92c53d", "comment": "Malware payload", "value": "0fae0fdfdb484861f47fb010434a21a9", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "c83a2aaf-6d49-4ec6-90f9-7141348eafb5", "comment": "Malware payload", "value": "1d65a3683f6db5f01628f797073cfd4f05a40d78c7ce8670958c8ce5bbec5938", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "161d1ab6-bfbb-425b-a665-5e6367e2c505", "value": "T164B489F7D6562974D2686630BC5E6AAFAD831FAF0EE08C81B440982DC483B7B3355D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "f72fc0ae-a009-46bf-b250-7c1f96f599da", "value": "12288:q4f4lRMyGw9xvRVr8B2OZzko3BOZmDc6IE/+AM8Yezouf:qMERJh9RrgpZzkog6IPAMZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168571, "uuid": "aed32480-5a23-4131-90e7-63cb43df6a58", "value": 499816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168571, "uuid": "28128924-4f63-4ee9-8f00-6d6ec88af652", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b757857a-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "3b9324cf-3371-4a07-b024-31c0fb9d4d2f", "comment": "Malware payload", "value": "e06e6dc3a9ae3477937260f122017a5b", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "4b6407ea-f329-48b3-9ed0-26bffa7991d1", "comment": "Malware payload", "value": "1a7ecaef037d3598bf9e970b1519667124006db232871ebb3a99da9a4628c876", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "d09c3458-c89c-4d07-bbee-a1c44a9a6499", "value": "T1EBB43CD263E1512FFB18E109C400BDAFEDB1399619307D745D89BAAF3A30CE9BC951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "4ddc0358-ce7d-45ed-8953-b3ee0ab5e175", "value": "12288:0UtYL4ypoFEw881gdMD/57tR13811AAsT:Dt8vaFfKetf3ssT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168572, "uuid": "03cba959-e98d-4a4b-9f7e-6f1a536825e2", "value": 520312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "9c1f88b8-c660-4b52-9daf-cde7e632b627", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b77ee1f7-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "f27a4a55-a9e0-46d2-af70-2e88018611dd", "comment": "Malware payload", "value": "aa755e871e1f8dc5263f285b0397ec75", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "176eda61-a97c-44c9-9891-677f7ebb4e4b", "comment": "Malware payload", "value": "e92a2d7cad1efde7804e662010b3b5ac0aa789e22d2fa76a599aaa2a081d8b85", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "907638c8-ab24-4646-bc49-eab34a597200", "value": "T1823412237A8A330D1155F7E79F8DA8ED367B11890D2650000543DFDBAEB84966F2F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "b25db6dd-2927-47a5-98a6-4374db761a85", "value": "3072:VU+Gsg8NNgOKEObyMPJFgTmfC/z8pK9pwUv5HfCc1fnm71UFyiKlrnR2xw6GhGX:C+GogOKEOOWJFMLQYv551fs1ioR7Fq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168572, "uuid": "14f6dea3-82a2-4ab4-bf4c-a4c08ea68c4d", "value": 240192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168572, "uuid": "58d2024b-451f-4b6c-914d-a15f5a876708", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d885d21f-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "4bb704dd-8bc8-47f3-9941-a89a1dfc0bc3", "comment": "Malware payload", "value": "dfd41eff2fc7bdfd7a20b682318ee9b7", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "35022ae9-5bc3-4324-8df5-085ce6504afd", "comment": "Malware payload", "value": "75c99bc6abe2d32b24eb543a47c929a4c520abca8aa58e07e232134c018d70ed", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "e2a85281-e921-4610-8ce3-89149bd0ac5e", "value": "T1CE34127F7EDB3CD73163E85DB69ADB93241113BBD09622D3AD851680CE1C2820ADF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "c6ff0b1e-0078-413d-9c54-ed59ff6ebe6f", "value": "6144:pzxvhSZ/8CNVUHg+NgGOKxyBCT+TZ1MCvcHzZgQooS:x1hSZ/8CNVUHgOV81b7vcT+QoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168628, "uuid": "a9f3fa71-e0a2-4902-b079-f2ddd14eab5a", "value": 243264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "2bdc3b44-d056-49ed-8265-ac787777e9ff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8de0f2e-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "6207a018-9195-4b77-b261-8f2cf02f06a5", "comment": "Malware payload", "value": "018be352700e0a0c7fb8cade07bed878", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "83386101-a492-4ee1-a21b-24c3d4fd8dd0", "comment": "Malware payload", "value": "2677c2e858b4ff59c12153a336da99a6cecf26a5c83ed2d42dbeb36b331e6fdd", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "0e763ba0-aa47-4127-82ec-c73986b0a3d9", "value": "T1A1B46BA3F5190DE5AE687109B4A17DBFAEE236D61130786C5FFCE7DC30608E126691", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "d3dbe2f0-7f81-4ffe-aed9-560e508b5ed0", "value": "6144:DELrOZq6mjrLeAxEQzQ16pkgoGlmR+EBJ6n07BkokyIT9CRyGOCiqXydJwLcYIH8:QL0xEhPQu3ltcBkAIBC01qCfwLL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168628, "uuid": "5d6ac39c-9671-4d65-a6b4-effd38ba3174", "value": 525644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168628, "uuid": "76ebbe71-bab0-4d83-bc60-55cb4e919e4c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "addd4853-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717168986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168986, "uuid": "049ffb90-049c-4e13-94d3-bd8ead57551d", "comment": "Malware payload", "value": "f62526293d0cc95fbe8cd97401393d32", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168986, "uuid": "c4cc1d7e-e551-4e53-917a-0b0164cb822d", "comment": "Malware payload", "value": "5881906e28ad73687aa370b14d62cdebbc1526348ace00e8b40a2f24fb387d9d", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168986, "uuid": "88955fda-1439-4574-b8eb-e9bf54659bd6", "value": "T1334302A49A75299BDA9D87F6E610FC423381C11B3A8F8619A05E547539FFF0A13B8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168986, "uuid": "fdc2829f-132f-42b4-9054-6ee65cc54693", "value": "1536:XHEWgR1Ux1/AvPkt0uB4vMsxzcq3qzQwo/4o:XMUx1skvaFr3qkwo/4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717168986, "uuid": "55418cd8-d808-46e4-aba3-cd2c853c64e6", "value": 55152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168986, "uuid": "59b473c4-537f-4967-80d7-68a847b85bfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7733c14-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717169029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169029, "uuid": "ed8f5c6f-5ba2-4613-af7e-850785eefbbd", "comment": "Malware payload", "value": "a1ecddfb8435524fd8938c5998ef499b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169029, "uuid": "615816a1-4807-4e06-8314-12dd7c62032f", "comment": "Malware payload", "value": "c520625d59be6d08b9d007a63ba93e107bbe0cf664532b1836b01dadeff22c07", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169029, "uuid": "848e5c36-507e-42c2-915b-58a5876e02fb", "value": "T1B6159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169029, "uuid": "8a4e64de-aa47-455c-b574-349ac1f718e0", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169029, "uuid": "e083476f-fdc6-4ef0-b82b-22ed930b8f90", "value": "12288:+qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tn:+qDEvCTbMWu7rQYlBQcBiT6rprG8aAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717169029, "uuid": "41122b0f-c8d4-45b1-a312-4119284922e5", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169029, "uuid": "33f51370-5383-4047-bd7c-0c6bc0ae607c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32062892-1f64-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717170066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170066, "uuid": "aafe7baa-a0f3-4f7c-850d-bd6b35848e65", "comment": "Malware payload (Mirai)", "value": "ec221e09e41c0dd610cdc067c002b8bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170066, "uuid": "467e0d09-9ccc-425a-b354-48cc4e2fa311", "comment": "Malware payload (Mirai)", "value": "8d5cfabdc4b25c0e8479a0fcf539e9cc5cf69fc5338b860a40bda32895000de9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170066, "uuid": "8d057614-8d75-4c88-8fb5-92936d4a2cbb", "value": "T14033F2B267F6B056C2B316B6ED33DC117AB55D6C97EA394418701609B7C78038FF85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170066, "uuid": "234a1e55-e136-45a4-b9d4-649a7051ade2", "value": "1536:L9O/Cz7382+HH5w4xLcPqF1aBexo4opKZbK:L9O/+382YZRxLGqFUFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717170066, "uuid": "7b5c8331-5ccc-44d5-96f2-3938a27229ba", "value": 52512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170066, "uuid": "4e829391-e81a-47b9-b9a6-11afa2e37389", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170066, "uuid": "fefe3666-a4dc-453c-9979-cac787e30016", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48816c60-1f64-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717170104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170104, "uuid": "c75385aa-b45b-47c0-9435-3a981920a0a3", "comment": "Malware payload (GCleaner)", "value": "e6afb008d2bfe15fc36ac13f265d9f51", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170104, "uuid": "9a259d01-d2d3-4618-bfe3-24d471e46094", "comment": "Malware payload (GCleaner)", "value": "5fafcace6b7ac33f55931be4d1eca951c0d7b8a75c3d1350f09aa9c1c1461d8a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170104, "uuid": "061807a6-5d5a-4083-9f99-e4ed32dd3727", "value": "T1B2547D1356E1BC47E72A8A718E2FD7E82F2EF850AE4963FA21186A1F04B1571C15F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170104, "uuid": "35385338-9ca2-4899-b236-7e985bd91404", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170104, "uuid": "dbbd8f68-e1a5-440e-82ca-af1e91f07439", "value": "3072:5JTYR7i5nxPirONLMd3H1kxnu3Y+cOqr5wDs9Ts99/IYE:5qBenxwULxxns/+aE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717170104, "uuid": "bf376d78-d9f3-400d-9ad9-40f95e52bfa5", "value": 281088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170104, "uuid": "283f499d-f2e0-438e-8014-1224ca1681c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1338738c-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717170444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170444, "uuid": "e30a2cba-c3e6-47cf-9424-074e0b91b0bf", "comment": "Malware payload (Amadey)", "value": "65c97cacd5ac72cf951542702837991f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170444, "uuid": "f5909d6a-7cfe-49f9-bfca-3ef28be1fe9c", "comment": "Malware payload (Amadey)", "value": "e294fc6b3598e6f702c6c5eace80b90363c4789cf736fa33501458ecffb12dfa", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170444, "uuid": "566a1af1-025d-473e-afdc-c2a93dab0104", "value": "T1D59533C2AEAEB9C2D848D032752597FC5EA1D9C2877F55E66208633FEC11E1F828CD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170444, "uuid": "44c32391-c3d9-4b30-9de7-4dcad53a7621", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170444, "uuid": "0096d4e9-549f-43af-b98a-a44a9c930bce", "value": "49152:B9aUjv2/GCEnM4BhL27jwfxiZgmkEBRk+Jeo:tjaElb27UZF8+9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717170444, "uuid": "6c36c45a-092e-4120-a704-677d4a5bca24", "value": 1916416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170444, "uuid": "910e5365-a3a7-4ab3-a402-2153403f7404", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ee32a5c-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717170532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170532, "uuid": "aace1def-c1ba-4115-9b7b-9c3fde8a0f75", "comment": "Malware payload (GCleaner)", "value": "8f4ddb7fac20b772d3c4473d37772463", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170532, "uuid": "9ae92fa4-9e26-4ebe-a9d9-771671dac5a4", "comment": "Malware payload (GCleaner)", "value": "094f313099dbc751bcdbd36b1b0af7f87b841ccf122767082d4c7d43b90734a8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170532, "uuid": "49a66e39-3f57-4c1b-81b8-fdc4e2a6a058", "value": "T10C649E03A2E0BD13DB6547329E2FC2E8776EF9506E05736622147A6F18B11B1C62F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170532, "uuid": "d90249a9-4805-4c24-99e1-78176ab098fe", "value": "352086de05af81674b561dddbf8f1c07", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170532, "uuid": "6359e0ed-6435-42e5-a1b3-84cee8967e57", "value": "6144:mLrXnD+5AmOyhp6t9Fq2yMGLBRuFXF9E:+rDSACT6tnq2yMG7ux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717170532, "uuid": "74ccfe53-e06c-41a4-85ae-d0c8a50dbb36", "value": 314880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170532, "uuid": "3c4ef0a1-9d6b-4708-948f-e6b2df5b8d61", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44ac3630-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717171386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171386, "uuid": "ed798b85-4109-425b-9126-3e6cf2ec2818", "comment": "Malware payload", "value": "4fe1de812d6424a8f5e6003a506a85e3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171386, "uuid": "ddce0234-bc2c-4ef4-be3d-57083be3fb2d", "comment": "Malware payload", "value": "492a029e108988b0cd222124f4277278f289900c6aa1545e1d2cc04c287ac943", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171386, "uuid": "d9b371c2-97f8-48f7-bb06-1bee73a148a0", "value": "T10094E18DE6651AB76BD24BE8081FF6A12A91EEADE330F3C257CF249B906157D70C0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171386, "uuid": "45af64f0-808e-4bf7-a8c1-a5d2428b2a9d", "value": "12288:vv5UvQs7OO8PCLCd0Wukx409QBKYdPvdoBjdChhw:G/xi409KKYdPv+eS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717171386, "uuid": "ed283c3d-6ddb-4233-af4a-f073f1500c7c", "value": 422956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171386, "uuid": "f0a33746-e6ca-4477-b6c3-ca07cd8c2ca4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47b693c7-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717171391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171391, "uuid": "d248ce24-8df7-477b-a78b-fa9c31d2824b", "comment": "Malware payload", "value": "ba282b9c44df06f40e15ea69d17b7b48", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171391, "uuid": "52f7b62e-2673-4884-b509-ce428045c872", "comment": "Malware payload", "value": "87ab0ce8684edc96de0c0c736ebc30065f4a052127c5461e98b127ca805187bb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171391, "uuid": "faf38e05-c55d-4580-bb3c-caec95b13b64", "value": "T17E74BE43D2E0ED53EB268A318E2EC2E4772EF891EE796F7521086A5F04B1161C56F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171391, "uuid": "4bcf4379-d774-4d13-bcff-6dcfc742fae2", "value": "67456cc7f494490da75fc59b8baf6354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171391, "uuid": "7332c057-8130-4379-8cc5-8fd685f69936", "value": "6144:JlXPycdVoKUlloLlt5ZvbXeCHAKtt8SI8QTfbqVqHE:JlXac6klNrez8Ifba", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717171391, "uuid": "676e4914-872b-4b04-9872-3a55df944360", "value": 352256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171391, "uuid": "b3473624-78d1-4bb9-a21e-d0dcadc19c4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "161c02c6-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717171447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171447, "uuid": "27ebacde-06a6-4c0e-8b47-67c01e750828", "comment": "Malware payload (GCleaner)", "value": "1a1a46477b066fa10629f810358e4ff3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171447, "uuid": "359eeb8a-ad67-4d16-be64-242505b28afd", "comment": "Malware payload (GCleaner)", "value": "ed34e1bde24b65ca2836c681b2c5eca0f1cda10ffcbfaff3c341f149a573e6dd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171447, "uuid": "4b2c9982-6ae3-4872-ba20-9548f826b52f", "value": "T111649F53A2F1BC13DB654B329E3EC2E8772EF9506E4573552208AA6F18B11B1C52F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171447, "uuid": "f4476021-5261-4cba-b028-44d81b393561", "value": "67456cc7f494490da75fc59b8baf6354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171447, "uuid": "86574506-e941-443a-9032-1bbcf34c4e09", "value": "3072:LvyEDooo35/0s2qOvm2Mu/cB+8hI/yHPdavW6SHoZ59yrY/IYE:7yEEoS5/b2Jm2lck8Kw1yW6SHcE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717171447, "uuid": "75e755c9-a284-4c59-96d0-c24b6e768dd4", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171447, "uuid": "1fa2e295-6203-4826-92d4-d3d34a28f597", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93cafa09-1f68-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717171948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171948, "uuid": "20506f29-80b0-415c-89f0-725d31a49170", "comment": "Malware payload (Stealc)", "value": "89ef597ad4066073fc1adfdd7e2487e8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171948, "uuid": "593ea621-68fa-4848-be76-193c0e1dfa4b", "comment": "Malware payload (Stealc)", "value": "9a3f94d8853f20963184f34cf75ecc08678ff43ec7ba524e54c1825d42d9f7d7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171948, "uuid": "e6d6ae3f-2875-4229-a90d-acaccbf232d9", "value": "T1B4447E4356E17C43E7268A319E2EC6E47A1EF9D0AF4963AA220877DF0CB1171C15EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171948, "uuid": "5633edde-5b01-4831-8373-20cf821abddb", "value": "67456cc7f494490da75fc59b8baf6354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171948, "uuid": "f31180cb-0e12-4c7a-8b68-5faa9f2b90bf", "value": "3072:ZiNo04Zd5/Dj53rOxGMWw2jzr5K+LWorYHLWorYO/IYE:ZijifnspWTfPL10HL10QE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717171948, "uuid": "37bc7653-531d-4916-a347-4fbbffaff4c2", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171948, "uuid": "c9cce289-2312-4c75-a459-14521549777a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "332b3f15-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717172216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172216, "uuid": "7ba32829-0fee-483b-9412-01cf6f922fec", "comment": "Malware payload", "value": "4d6ccc9fd972564aeaeb6fb827428b6b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172216, "uuid": "f2ca3f61-240e-45a9-b29f-a36488e7a650", "comment": "Malware payload", "value": "2551f58d04fbd0270add3a92fcde08dddb4085da0110893c204e897e5d1b9325", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172216, "uuid": "d5b6b923-07c9-4836-b777-fab2530815f7", "value": "T1FFC533BB4FDDF02ADEB4877E10F7F368A578782598D98A91740E2AE111064A33C671", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172216, "uuid": "f7e37ec5-8016-4025-bbcd-f72904300a94", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172216, "uuid": "a745456b-7979-4b8b-8028-75b530156e3c", "value": "49152:mfGWOCF/P5i5IDm3JL71Z21IKYdcW2S4nfNdKgll:HSP50IkalYoL1dKgll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717172216, "uuid": "a67a6c78-5cdc-449d-92c4-e80950b23f33", "value": 2508800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172216, "uuid": "95045a51-b440-4b58-b872-93c3343937d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c6c58d-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717172218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172218, "uuid": "6f9671ff-d7f6-4c22-b9dd-69633007b8a5", "comment": "Malware payload (GCleaner)", "value": "9b7b006e177305cfb3c4bcad2e47f04c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172218, "uuid": "07bb47fd-beb2-4e3c-877e-998700d50ad8", "comment": "Malware payload (GCleaner)", "value": "ca0a235092c2bd555abb50900acdc924fd6b8d10ac2d7ed19ac3a52f90a382bc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172218, "uuid": "b732195c-92f9-4027-b062-74880baee26f", "value": "T11C64AF0353E0BD13DB664B729E3EC2E8272FF9406E55735A62146A6F18B11B1C92F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172218, "uuid": "aad5814b-8c2d-44fe-b14b-8f1a142911fb", "value": "e05e1c67740ee1284ec193788785fde7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172218, "uuid": "f13f072c-2eb1-4725-9177-8bda4dcc1843", "value": "3072:4PunJ0ba6YtZ9v+9SYlADyosTnAXH1ZzbZWr4tqZm9Wrob/9t+ZGJ57bJkTn/JkK:L6Ypm1fbe3b8reqZmArQ9t+iJW/JWFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717172218, "uuid": "c286c4e6-82c6-429c-b8e1-b9faf132c051", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172218, "uuid": "4d1f773b-0d37-41f3-98a7-c04fd8339292", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27ff3d3f-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717172626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172626, "uuid": "cd0b4143-e48f-4ebd-8cb2-49b46d78b15a", "comment": "Malware payload (Socks5Systemz)", "value": "05faae1facb3898ba5e0b76cb9f93d09", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172626, "uuid": "8b8b04b5-eaf2-4a2c-aec0-20e6dda74764", "comment": "Malware payload (Socks5Systemz)", "value": "8c3ef35395c259d33dcd517302932839a9fa10b9d52dddf5abca59cbb18a268d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172626, "uuid": "4cc2b054-d682-479f-92f7-d206045f3034", "value": "T1E136335CC317C6B4E5A6DE744F6CDA044A6339082D682D1472FDDE98C3E39A2788D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172626, "uuid": "51b9baff-19b1-4767-b452-fe94c51ad303", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172626, "uuid": "95698c3d-0328-44a6-96f5-61051ba278ba", "value": "98304:mNA089yrOlkigt7YEOrkG5IvDfkl+WWW5URzJLWHW94wdLV:w05gt7YEOrk5vDfkXAJ5llV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717172626, "uuid": "71dc31e2-5b0a-48aa-9407-ea1b5fb38647", "value": 5149602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172626, "uuid": "f04a3c8e-5361-497e-83d8-6fd17e876efd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94335d3e-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717172808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172808, "uuid": "b147f211-f472-48ce-a147-daa2daec273a", "comment": "Malware payload", "value": "1fdb37e93e7367e1ec351400187ad681", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172808, "uuid": "e8e683f7-89a7-4936-808e-b09baeef8424", "comment": "Malware payload", "value": "e4e9f29e13b572a6bc4fc0323850844a33d9e366f7548113538211fb5b3b8e92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172808, "uuid": "67d94675-d0d3-491f-957b-f4a1bffc5f1c", "value": "T102159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172808, "uuid": "fa0bee91-24ef-4a3e-9ec2-965b05cf5f5b", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172808, "uuid": "ff78fe73-2f3c-41ea-8720-122a56f3c647", "value": "12288:zqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tx:zqDEvCTbMWu7rQYlBQcBiT6rprG8aAx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717172808, "uuid": "06948af1-d597-454a-901e-0aa462a48b83", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172808, "uuid": "33718152-ada1-40cb-8a45-7f0dbaad254d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8551fec-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717172976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172976, "uuid": "51447119-6a8d-459f-876c-34cbf7b0bd7d", "comment": "Malware payload", "value": "c97cb6f121c28fff1edd52cdc2e8da1d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172976, "uuid": "79bc10f8-5d4f-43f1-a2a5-db65119f4de3", "comment": "Malware payload", "value": "9e6260107eb38d8970b01f135514e39203a801d4ffcb070a359d470b083d4bf1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172976, "uuid": "bc99e583-6a06-4e72-bbfe-24b64be871ba", "value": "T13B45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172976, "uuid": "c652fa98-30ef-4cc0-8258-8822d9069eeb", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172976, "uuid": "67adb88e-7436-4326-9e65-ca473ba42c58", "value": "24576:4qDEvCTbMWu7rQYlBQcBiT6rprG8auE2+b+HdiJUX:4TvC/MTQYxsWR7auE2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717172976, "uuid": "51b5769f-bf4f-4d54-847c-8110796f08c4", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172976, "uuid": "24619110-a96f-40cb-9d81-e3c230c10461", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4575cd3-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717173291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173291, "uuid": "95f2c4ca-0be3-461d-b3ab-f37c38a37c3a", "comment": "Malware payload (Amadey)", "value": "45077db6a915f670b9adc24609ec023d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173291, "uuid": "9999604b-9ce4-40dc-8743-dd4fa9b71901", "comment": "Malware payload (Amadey)", "value": "2121352e419fb5246709a8b1072fea04ac918bff2bf7d15b44398316cf3a669a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173291, "uuid": "c78afc22-34b9-4cd8-9752-39bfdb7549e6", "value": "T1BA8533691318F832EB68C2F64760D1158C79B683DC2DF8755D28D8BAD71394F8B313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173291, "uuid": "ec61fa12-dc35-4f06-b250-32f8b2f1c1db", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173291, "uuid": "a1a8c571-949a-45f8-b7bb-8b8ffaad0623", "value": "49152:VPLcQOVjJX1iPm8lSu7pC+1jt9u51BJk0Bgz6hC07Z4xuqv/O:VAQOZim8ou7U+1aU6hC07YuyO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717173291, "uuid": "ba6afedf-0253-4498-aea8-0b1fb7053060", "value": 1865216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173291, "uuid": "0bbbf105-e71d-4050-bd86-e9f0811a8e5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8c4c30e-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717173299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173299, "uuid": "1e9d41fe-62d5-4569-9c16-ef1ae343b5c4", "comment": "Malware payload (RiseProStealer)", "value": "1295ec49eda6244ca5841384a2027a95", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173299, "uuid": "8d402e89-342d-457f-913d-8388b2488b45", "comment": "Malware payload (RiseProStealer)", "value": "1576d39f342291040ec3755d26a9dd3cd6f699b5fa169069a57b80b9700d1299", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173299, "uuid": "3f20f5f7-1c36-4b66-977e-ee814e9fe765", "value": "T1F0B533B21D9125B6DDDC0CB2CCE1197B3AA977E9D80AA753A30F661C1E10743F574A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173299, "uuid": "d2fc0314-ee3a-4271-be24-df555f3f2ecb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173299, "uuid": "3b4a7799-df7a-403a-903e-13551d37168d", "value": "49152:nkmKhyq24kI3qebVaAUblsTtTTuUSXmqeSe8e50Sv8R1y6U5CWNd:nkmKEqlkAbk7lstuUSeSe8vSUR1Z0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717173299, "uuid": "869dbf92-2083-42bf-80a2-926713611975", "value": 2373632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173299, "uuid": "06313f39-24be-4b33-a4e8-d1cbedf5acbc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8faa94f8-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717173659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173659, "uuid": "e2a8ba0a-2542-43a5-8339-1f4db0dfbbd2", "comment": "Malware payload (GCleaner)", "value": "238df9f29ddbf2d1708ce408193ad6e6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173659, "uuid": "07e35174-e895-4b33-a202-4c964a172d70", "comment": "Malware payload (GCleaner)", "value": "d3e8b56980294c8395a840622e1e13f9c72805f8c780589ccf9c444c80afe16f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173659, "uuid": "8b0af905-eb48-49bf-b61d-2fe3dafbf7f9", "value": "T161547D8252E1BC47E7778B72AF1EC6E87B1EF890AE89636621046A5F04B1061CD5F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173659, "uuid": "5e513673-9cbd-4874-a925-373d1260577d", "value": "67456cc7f494490da75fc59b8baf6354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173659, "uuid": "6a5b2f28-a723-4d41-9f66-f6c56b6383f1", "value": "3072:wsgnT+opbqa2X7CFFS0CEdP+uyrX3gcV8NTvS5UhczXczb/IYE:w3JHYkFGEd4X3VUv2S5E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717173659, "uuid": "79336c67-2377-4250-a14f-7514a30f3184", "value": 281600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173659, "uuid": "d81131d1-2b89-460d-a45c-be8d031d7b28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3099d7db-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717173929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173929, "uuid": "0e8c73d8-231e-4328-9209-607a89918707", "comment": "Malware payload (Amadey)", "value": "c4a1f91ad84e58679489d3d54972cfc6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173929, "uuid": "e75af83e-48ad-4194-9316-1559e2750df0", "comment": "Malware payload (Amadey)", "value": "7451e0481a39ca9aae4a234b96005a4f66dd623486c3e76beb8c9ef4711fd71d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173929, "uuid": "bfda9540-9339-43cc-ac75-d5b0388472e7", "value": "T1279533319453ADB8E20CF6B661B397365BE0EBFC06C8E04D80A864164D65F5FAB078", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173929, "uuid": "9cabc313-ae05-447f-b694-642ec8bc3efd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173929, "uuid": "9fc1ca0e-a4aa-421a-b2d5-cf5d2bc6e997", "value": "49152:zm7weT1tgEVtsMf+FYT6CUF9Qr22CsVkw5uPJfk:Kk21bcYTWLSGi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717173929, "uuid": "7bce2ebf-8f26-485d-a792-c8981738813d", "value": 1906688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173929, "uuid": "473a65bc-3a23-4a4d-9381-5731cee178dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8def85-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717174003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174003, "uuid": "bdd3670f-4bd2-4a9b-8de3-0d6633d0eba5", "comment": "Malware payload (RiseProStealer)", "value": "0b66b74eb897126d53dce5af34dd5efd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174003, "uuid": "6192fa0f-1f5b-40ef-b63b-a1f70355c7d1", "comment": "Malware payload (RiseProStealer)", "value": "de32982efd63483172ebb10102aceb72cd1d3d98f0dca2a047e71dc72d6f3be4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174003, "uuid": "965b7b31-4287-4aad-af06-56f5f15f55a4", "value": "T1D506E11677F85E4DD2AE8B31E1F2443563F4EB81A322D34FAAD4387D09627484E096", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174003, "uuid": "4a0ad961-45c1-4986-b86d-82cfbad6435f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174003, "uuid": "1abd42ca-6edc-428a-acb7-c81d36055e36", "value": "98304:LYyan8z32oDlqJXa9VdCaiBnRyEDWUN2L:LdKM32oZqJXa9V8as4zUwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717174003, "uuid": "7b6bfe00-0462-487c-b9f9-796ccc051d52", "value": 3974144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174003, "uuid": "41e9b8a0-dce1-4944-9b77-1daf1587c243", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e02b605-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717174059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174059, "uuid": "599df2e1-7abc-40e8-8b42-e11decce218a", "comment": "Malware payload (RiseProStealer)", "value": "4e8d19ced36a99ae6301a31b28041230", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "risepro", "colour": "#017383", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#4B557A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174059, "uuid": "9a5a1841-f16a-4ddb-9f1c-2cf29ca29f1e", "comment": "Malware payload (RiseProStealer)", "value": "3fd3c0d4660cbe46f77c3bd91bff0367a2381990276b4c8a959c11bd85737fe1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "risepro", "colour": "#017383", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#4B557A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174059, "uuid": "21713229-da82-4fab-ae1f-c74ce104d754", "value": "T1DD06D01673E84E1AD2AEDB79E371443617B5EB43B316DF0FB95125BA0813308CC49A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174059, "uuid": "75b12c08-f7c2-4623-b3e0-2c61e2be55d9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174059, "uuid": "02b3f1ed-2096-4c04-aa6e-507e2ce05f31", "value": "49152:2Zhud5FeQD3x4hCdFjPEzMXRrKJcMs20U5BCSQhCGD2AjPNTNUa6VEkyQR:2Z4Rh4aTEzf5szU5ESQk6PNTIEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717174059, "uuid": "3a926a73-f9f1-4c06-a571-04ca2e400fb3", "value": 3992576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174059, "uuid": "5f7586dc-6f87-4a39-9e0a-ed584218a04a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40977713-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717174386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174386, "uuid": "0ed5bb2d-cc05-46fa-a420-b59a8a2eb221", "comment": "Malware payload", "value": "7e02e25e6307a5a7a5ceb75cce9bfa99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174386, "uuid": "517167b9-fbb9-4f59-8728-af2066960975", "comment": "Malware payload", "value": "09021f52dbc5c389ae0bedb2f2fd15aeb2b6c1f1133a61fe85b10901cfeacfdd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174386, "uuid": "49de8e14-8dbb-4763-8634-f32ddddaf318", "value": "T1BF03E198F8692446CA0858B754D24628CF00150915DFBB72F9B05C3D9037BDEAEF86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174386, "uuid": "491d1120-42d4-4829-8711-29b34de8b298", "value": "768:nA/aL53lI1+BoY7uDMx9gyRGPqY85aA7r/ucyE0l9cX:nAs5A01ia9g+Wahy9cX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717174386, "uuid": "ca580c2e-f998-42e3-8433-568fa349d551", "value": 40008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174386, "uuid": "e0a03376-8690-4839-a18c-e232410dde5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174386, "uuid": "b8d296f0-0001-4e59-9492-89043cbfb2f5", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04346fc9-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717174714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174714, "uuid": "3e47ecdb-8ba7-4803-8d0b-f3aad8111119", "comment": "Malware payload (RiseProStealer)", "value": "a07f3c6ddc6edbbe7cc895f18a99f330", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174714, "uuid": "2e32b0e2-aaec-4f5f-8f7a-1e7a6a905200", "comment": "Malware payload (RiseProStealer)", "value": "5e9c37278e889a966ec9432157237e80159535125a250b871ce569a5b8b19505", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174714, "uuid": "6e2f2125-8ef2-4a1a-831f-6480f967a9c9", "value": "T18906CE167FE84E49D0AE4A36D1A1FC355FBCAE476322D34EA69434AF04323094D797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174714, "uuid": "a8b660b9-54d0-4ea3-8346-d7950e9c0040", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174714, "uuid": "bd8158f0-5b53-4674-b8c7-bd71116c4b83", "value": "49152:qgvoVIam4G73WkJ/6xEvfFj/k6dOW6bZL7xgnklYn/pDEs/CUi5Nkbmed2iP5fcy:q5FG73AUj/NWbd7ORDEs/CvSbmerPJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717174714, "uuid": "01fc6edf-27d6-4961-a7f6-581bbe2b4382", "value": 3970560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174714, "uuid": "50710273-47bf-4440-b5f1-0c4ad211b108", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15ea14cf-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717175025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175025, "uuid": "6b70b961-a425-4f4d-b74d-00a03c909d94", "comment": "Malware payload", "value": "d062a77a1be285a30ebf7e4efc908ff4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175025, "uuid": "01e1ae58-91dd-427c-82ee-4d1e51f77708", "comment": "Malware payload", "value": "8f594e066e46872c10e71f57826dd61904ff84aac75256b479176281455de520", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175025, "uuid": "dcde1d9c-42e3-4b27-8b76-91659a8d6103", "value": "D4430206236A2AB2857549F4E7FCBF8DE6463E688FF55C197C107928B97136D2CC881C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175025, "uuid": "78667d4a-605c-4a16-afc5-87d1a5fd4d5d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfyqC:yYI0ARqw1qAEv7UIFM8oJorFquyjC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717175025, "uuid": "d0110e15-75fc-46e3-9ee8-d8fba84beb78", "value": 59368, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9c5bd98-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717175045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175045, "uuid": "d04a9ceb-73fe-451e-9b27-6ffacb476e37", "comment": "Malware payload", "value": "998561367a4b8901702ea9e4574ffe93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mioro-botnet", "colour": "#888ec7", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175045, "uuid": "f12da2a7-2f96-440f-88f0-5059fbbcc319", "comment": "Malware payload", "value": "a966f56a6a26ebb26cc6486cd74ef8f3bcdd600dd3ab567810c2596d7e5ca1d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mioro-botnet", "colour": "#888ec7", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175045, "uuid": "a0d94bf2-012e-4875-89e4-f76597d1d57b", "value": "T12EF0DC28D00301BB7866447765C9DFAC3E0F304AC94A42D9207C7126C4ADC9CE4319", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175045, "uuid": "59a6c0a0-f320-46e4-97e9-893c257eeea5", "value": "12:/VJWRw+qR5NyMwjhyipFSGgQrgffYR0wV:NYR9G5NgSGRr8+0wV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717175045, "uuid": "b10c1ad2-8591-4f38-a538-5b34efa5b2d3", "value": 450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175045, "uuid": "07a015f9-8179-4b37-bfb4-eed2434692ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b05b093-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717175584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175584, "uuid": "2db910fc-1700-486b-b269-75d9619877f0", "comment": "Malware payload (Mirai)", "value": "41cf7136df2e003201fc666578ab6d86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175584, "uuid": "4e142a63-b6e1-4ee8-9024-5d87fe1a0028", "comment": "Malware payload (Mirai)", "value": "3aded40c2d6f0a52f3b3ef4017a361277d6614ca0245f6bb92f72822bda28962", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "6493319d-312b-4963-bff5-9add870cc56c", "value": "T14443F12061997B21F7E159BAC9B34943F0541BF6E8E6592450010F383FC5AA6B3EEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "30a6c6c7-3ac9-49e0-8cb7-24a7188cf53d", "value": "1536:YWJndg0KeNwHJcRz5tiMEnhZ76w0m6qogyDkl:Ywdyen4rgiygl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717175584, "uuid": "c2423c9d-bfa0-4279-8743-fe6ddd9aee91", "value": 56048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "cff4f13c-9666-4188-8550-2f889bb9490b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "c68752ca-54d1-477a-87f9-cbd4f182e4e2", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b071141-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1717175584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175584, "uuid": "347600be-c6b3-42f9-adc1-685345234a46", "comment": "Malware payload (Mirai)", "value": "922dff2183f064b51499454080c78796", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175584, "uuid": "56cb15de-baf3-468f-8d99-8e5fadda1359", "comment": "Malware payload (Mirai)", "value": "f5c2af310d635da12be761b26fd9b4de31bd181455a104a9d2d20c2c6ca5a017", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "09c5cb8f-3e2e-4e02-88e2-d62c366f362a", "value": "T151F2F11793C40041E9A51E33AABE7503E2A76B9C21C639DC9D21116DE9D36C94FFD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "a2c73543-6e94-493d-b408-a2e60f9eb2c0", "value": "768:YWLbhHi+DG6bDAHgsvBHCGzVvxniyS1na5ka7FpNrrYSVyj3UQd:bbhHBzDAdoGzPni3na5ka7Fj1Vyvd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717175584, "uuid": "67c7e3f5-5eaa-4c52-8d0e-87163c66b8e5", "value": 36436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "df8df1a9-7177-44b6-acd5-d2efd4151335", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175584, "uuid": "07e48855-15bd-4db9-bb60-efb36a6a9807", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1604920f-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717176154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176154, "uuid": "61e338c2-6e15-49cf-892a-16cc223fa6cb", "comment": "Malware payload", "value": "74759d3867186a9e30f73af7d46745af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176154, "uuid": "ecf9b28d-cba0-4746-a92b-65a99c671265", "comment": "Malware payload", "value": "50c1803e35fe6eafa4d766aebad06c334590e316af56e06a79b35b450dda790e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176154, "uuid": "ac7547ea-e5c0-4562-a314-f5f3187f334a", "value": "CD92E18726983743F4B195F5F77DBF88B2066EADEB3B542350946123A07311BA208C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176154, "uuid": "d61c3a48-4180-49d3-ab3b-6cef9ab52baa", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qsn:YTYIDfYG6ZmewZ59+Nw1qsn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176154, "uuid": "f52d0d6a-c400-4c02-8178-095e4a32cec4", "value": 20272, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da1aa3dd-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "5e9cbf72-8eef-4fa8-bf85-2dcfc1b8c39d", "comment": "Malware payload", "value": "1ccc442dd3e1300c30843988ec6e1b63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "fdbc7c21-e08a-4f32-b19c-d26a81fd65b0", "comment": "Malware payload", "value": "10a2d7747edb7f422d04be9ea94ca94ae66b125e889746215432e9115b92dec4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176791, "uuid": "9299a159-d761-4162-81da-12732598ff6a", "value": "T198E02638D94384BFB8A6887ABBE86F9C2F0E3106860B069815361116C8A4C4C9435D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176791, "uuid": "4f8b91a1-ec0b-4bc0-9f47-50d3eff113f3", "value": "6:/VJ8UwJWwFwRVYv+EYxqR5wF/KE3x3F5kJVKEnDj638VKE6HB4uVfWTZLR7/KEj:/VJuJERw+qR5wF/0gQrgffoNx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176791, "uuid": "557671d9-276b-45fd-98e2-929f04429308", "value": 338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176791, "uuid": "1edb9621-a5ab-42fe-870d-98ddef1d5815", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0019b81-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717176801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176801, "uuid": "6081ac3c-1dd9-438d-9168-6369a228fab0", "comment": "Malware payload (RiseProStealer)", "value": "6e606cff9228a9583e016115434d19ce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176801, "uuid": "536a1f67-9fe5-45b8-bb3e-7c0735a687ad", "comment": "Malware payload (RiseProStealer)", "value": "081c59596c2ae649f73ae16d6a35b2df990371f8277ac134386e3f6941f3f529", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176801, "uuid": "868e9839-cf26-4fa9-b21c-d888338dc0fa", "value": "T1E3B533A78E39742BD7DD087708C342B9236A344769397137354AE9822017E7EF4BBB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176801, "uuid": "d5a60ead-532b-4408-903d-374b39f84349", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176801, "uuid": "db36b5fb-b802-4dee-ba2a-a412d9231c03", "value": "49152:KkmKhyq24kI3qebVaNgvRfu/wDzWw/3ChfR1L04olB4J/:KkmKEqlkAbksm8zWMOz04o34N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176801, "uuid": "a142024a-71dc-467c-8fff-87b9f2d5a7cb", "value": 2362880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176801, "uuid": "d2da8969-8b50-4218-87d7-46cd7982e1df", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe70d76-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176847, "uuid": "6912880f-611d-44dd-8ef9-b65f8bb12245", "comment": "Malware payload", "value": "fd87a5f04c1f109e0e64d2525ee9ec11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176847, "uuid": "6b690c05-9dd5-41ea-b194-3c6c95a17c88", "comment": "Malware payload", "value": "5c58c9e993c5708a9c1902a9363b0b258a6ec39f3f9f18e92259bff6b1dc24a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176847, "uuid": "e91ae62e-3c65-4afc-a2fe-7c7c6a14c54d", "value": "T1A2515CC832D64631BFB1ED9275F588987280E1D25BD3AF96D0ECA4FD468CF0C65907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176847, "uuid": "d09c9f12-7510-46c4-a659-8f20aa1b5b5c", "value": "48:vXSQSCSYSGSMvzESDSiStSkSUSgCUfSzSol:vXSQSCSYSGScESDSiStSkSUSgCUfSzSg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176847, "uuid": "295e6ea8-8d2a-4b2a-8981-8acd64459c03", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176847, "uuid": "e9e2f125-3250-4752-9d61-8ca7a3118a22", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e14116d-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176932, "uuid": "73b03c6f-bfc3-41cc-8b5f-169c32f6a9b9", "comment": "Malware payload", "value": "547bcf98728a60c578dd9a236f9d90d4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176932, "uuid": "9cfa9a24-3fac-4d5e-9364-8900f5a83239", "comment": "Malware payload", "value": "0368805837d29c2925cca5732bef284906ffd6e4f577fc93c259f22a1d4489f3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176932, "uuid": "91896430-aa7a-476e-a096-064b4af4b3c5", "value": "T137159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176932, "uuid": "040545bd-85e4-4a1a-94d7-dd0089d421e9", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176932, "uuid": "da6527dc-cd3b-46d7-8b01-c94a3ce1b42b", "value": "12288:+qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TV:+qDEvCTbMWu7rQYlBQcBiT6rprG8aAV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176932, "uuid": "fa36da50-a1af-4920-9166-02f88a187356", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176932, "uuid": "e0d5cfdb-8556-4cb5-bb47-c222323cab66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446fbc67-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "a6758813-8c98-4d4c-ad6d-07440aa54e45", "comment": "Malware payload", "value": "0520e4bfb6e3d253c97db10424767228", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "0c661cc8-74a5-4310-bb5b-5a6e0d2dee4e", "comment": "Malware payload", "value": "70b644a8783f70bd5caf95fc1df9d2f19ea33cd5ec9db5c0c25efb7fa1274571", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "b98b5358-2683-47c3-a8b0-d7f1bed7d61c", "value": "T1BF513C85B3824431BFA6DE5675B4C844B284A0A35FD2AF45D4ECB8E98A8DF0C7491B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "4e24429e-b9f4-40b0-904c-a6b0e56ed54c", "value": "24:vuOSLaIOSNOSjOS9OS4T7kaUoOSRoOStOSS1OSzOS3OS5a/g9OSyOScqOl:vuRTRNRjR9RM1RRoRtR8RzR3RgQRyR7e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176969, "uuid": "2572a475-d973-4af7-b816-b589330613c1", "value": 2723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "35869a5d-f306-4f19-97c4-40f03523c30c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "447f2c36-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "47a90cb9-aa78-4c82-877c-e128812f4bd8", "comment": "Malware payload", "value": "8536cf8616ab14372938d50a40e943eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "b5974b01-e293-4632-9e3c-e68d6102c976", "comment": "Malware payload", "value": "b7e606934a7602f8a829abc04affa29e050a0a6700c69a14a73045fe57176a3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "188ade47-6130-4444-8612-b97172a27c43", "value": "T13D5147C972D64631BFB1D99275F588987280E0D26BD3AF86D0ECA4FD468CF0C74907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "ce150689-13bd-40b4-85a1-8f3523f0520d", "value": "48:vXaQaCaYaGaMvzEaDaiatakaUagCUfazaod:vXaQaCaYaGacEaDaiatakaUagCUfazaq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176969, "uuid": "864e6ac9-9c42-44ba-8dc6-da63d3443f46", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "ad033814-7a26-4c37-8d70-451b822d31e2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448081ad-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "38dbb8af-7aad-42b5-832c-8cf7112183e3", "comment": "Malware payload", "value": "95b49a413628e6d309ef3bc1d81e7f0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "200d2c11-0116-4bbb-801c-a94e26cdbdeb", "comment": "Malware payload", "value": "3aa51ddaa904fa69d24e26984e1a91f44b6a49628aabdfd48a853328460da1cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "0b8dfd17-b70b-46b1-a475-00c5e83b6df1", "value": "T167515DC832D74631BFB2DD5275F688947280A1D29BD3AF95D0ECA4FD4A8DF0C64907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "ae63fc71-c159-4386-baa7-f74cf23bb241", "value": "48:vXgQgCgYgGgMvzEgDgigtgkgUggCUfgzgoz:vXgQgCgYgGgcEgDgigtgkgUggCUfgzgC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176969, "uuid": "a8ac34d0-5b30-46ef-9c8f-8b6cbcda5dec", "value": 2877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "e14da7e5-9472-49b3-9040-86da629d1bbf", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44915542-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "92548277-1162-4dc7-ad6d-86a514e5fcea", "comment": "Malware payload", "value": "8d449016618938deff8eb0e4372941fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "db337bd9-acfd-4ddc-9938-89a4625c09a4", "comment": "Malware payload", "value": "837a7b98ff42e9447c6d38d05a96ea76d2cf6bcfc8b0fdec0794788c72f12666", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "580dd50c-18d9-4386-b88b-00a2edc92db2", "value": "T190515AC932964234BFA1DD5775B588547680A0D35BD3AF86E0ECA4FD4AECF0CA4907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "7d0562d1-de26-4f27-9974-2b24998d93a4", "value": "48:vXoQoCoYoGoMvzEoDoiotokoUogCUfozooL:vXoQoCoYoGocEoDoiotokoUogCUfozoc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176969, "uuid": "0b273f6f-99db-49b0-9ba7-a97d15072825", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "21d1e092-b5c3-476c-ab6e-c5631f957f82", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4495229a-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717176969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "89321e45-a5a2-45f0-b249-549d775c718a", "comment": "Malware payload", "value": "41d00598b5af81e2b238e13af380aba4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "e828c5d9-5b6d-435e-8732-b6eec7533463", "comment": "Malware payload", "value": "4eb83791e04214c9eb7727f0d93fd95e7a6bd7260f0ec510b51f16cb8adcfd80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "a7145f13-92d9-4ccf-983f-37716ec4670b", "value": "T17F5170C532E24270BFB1DD6675F688547680A0D6ABD3AF85D4ECB4FD468CF0C64907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "ef0c46d4-706e-4259-8c86-727c45141f5a", "value": "48:vX4Q4C4Y4G4MvzE4D4i4t4k4U4gCUf4z4ob:vX4Q4C4Y4G4cE4D4i4t4k4U4gCUf4z48", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717176969, "uuid": "4aab93cd-5329-42fd-a980-31b8d9815174", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176969, "uuid": "288c4580-7c69-44cc-8439-071b6f94fc24", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b09e7a-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177159, "uuid": "9f354e4f-f310-4a21-9a8d-79cb98c73db9", "comment": "Malware payload", "value": "1c7dae2ae5c440891fc49c6109eebbe2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177159, "uuid": "c7e0ae2f-6fe1-450a-a37f-863d3cdb0f99", "comment": "Malware payload", "value": "3455383f8749d6c1c0e0b9cfddc1637f6f73a89356483371559f6b0e862ff976", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177159, "uuid": "bb6cf121-6ba6-4ba9-975f-d03242e99d1e", "value": "T174B533E71F636433F6D0A433423A8720C85A875289DEF7EA0EC4A9F70E57750245AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177159, "uuid": "1d4c8475-1f1f-4bae-9807-2a1eb093fb99", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177159, "uuid": "9ae621c3-e215-4181-b9e6-0de9c8d22106", "value": "49152:IVRIO8j/CSVKaW3N1X6ywwutKVdbM01jbIIYJzeYdDwNqXmiMVRsz1:w6HnqN1X/etKzt1jbu5sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177159, "uuid": "9fc30bd5-90ba-4f0f-b163-211c0260e3c6", "value": 2411008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177159, "uuid": "046b3fab-c700-465d-943c-0c186f9e503f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed67c3b2-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717177253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177253, "uuid": "20315c63-95fb-4fb1-a76d-6883bb097de6", "comment": "Malware payload (Amadey)", "value": "2ca853335a515ded015111241549e7b1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177253, "uuid": "cc2f0cc5-c2f3-4c35-88db-d610006fe089", "comment": "Malware payload (Amadey)", "value": "b65971334ecaf4a2fdd853dbc76e93cfa232f3dec7d99a4bcad402e9cc7ea65b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177253, "uuid": "016fbebf-ad67-4f5f-b8ba-a1dde94d6606", "value": "T132953307805C6D69C4EFB4B6D49E540B8DACFE0B4CCDD252A6CEC81332296352DD5E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177253, "uuid": "7b55736c-0594-4f44-825e-4aeb370e7ffe", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177253, "uuid": "d91b6f44-c68e-438d-90bb-0c63dd39bda7", "value": "49152:12vCrXOsSFGMtR9JUCcLFBEM34JdnKGnx:12WXH21zcLjEMoJtB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177253, "uuid": "318c8e18-0a58-4815-a7be-60ac24841f15", "value": 1881600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177253, "uuid": "cc6d76c3-fd5b-48e5-8c6f-87adc5af8a15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f28eb2ec-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177261, "uuid": "7774ef26-77a7-4166-8a72-13d1e100b350", "comment": "Malware payload", "value": "7a6b77902c01b50bd6cea7691ae8233e", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177261, "uuid": "8c4efd5e-d56f-4c93-916c-9f27708d4e17", "comment": "Malware payload", "value": "6725fd108f6937533ec450b49eeced7c508a75800c5e93f54dcd51be14a134ac", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177261, "uuid": "70a36449-b80f-4d44-acf8-3ca92c7afeb4", "value": "T1CC03F16BE9BD4409FCDB16FF964812387B34C7A3892DDB8D74AD8254FB8F008874A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177261, "uuid": "eca2ce07-4209-4b48-a8af-f2d7aae440ab", "value": "768:tM1kKe95WwMzi4U0ezhsFSMfuVPrfn7wv8uVZwUBL3OrynO5WB8c9:tkkDvWw+NeFofu5f7X4wUBHVB80", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177261, "uuid": "5aeb1ef4-81de-456d-8154-648d31827f7b", "value": 40556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177261, "uuid": "8585f904-74c2-4717-a4fd-10187e9510a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f348a982-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177263, "uuid": "97d18094-8800-4310-a151-4424c89a79b9", "comment": "Malware payload", "value": "6988937301fedcdc17093b37cf1d5458", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177263, "uuid": "9f891ca2-6ff1-4ac5-8b49-41e3dd497b06", "comment": "Malware payload", "value": "bfc44192638b556a50cb2a407c19b650f2269316710dda82d8533feb70153b69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177263, "uuid": "0d556891-8dc5-4580-adff-c14b3d832345", "value": "T11ED2F1DA7E349CADCC2E4D7FD5BD5582AD85A0190AF8F63BC3106C3223B70DA96B84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177263, "uuid": "1c9cdf52-5214-48f0-96bf-5ff07bc213ea", "value": "768:6aXSa0xl/o7Kd/ux/zi0Uzn+F+/DBX8DDudBDjeFcB4N5cN:6aXQxRo2oi06+8tSunwN5cN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177263, "uuid": "86e569ef-7e01-4674-bcbe-3b6e8cddca5c", "value": 29192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177263, "uuid": "77409afd-bc1c-4d62-8181-d74556334eed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177263, "uuid": "385acf74-40df-4854-928d-5c5d99633e7d", "value": "tnull", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18d9a531-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "171a8eaf-aad9-4eeb-803f-ce7f076ec8ef", "comment": "Malware payload", "value": "8aaa14fba32717115bf26e0fb228d630", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "3f16aded-25df-4087-bbb8-a768b8abe5f9", "comment": "Malware payload", "value": "7ecb69c9f4c44df8f161b000b89ff002b478550b3f2836b7ec27ad38269626e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "9646e21f-bef9-4e06-8d8a-a20ff8c4c3c5", "value": "T193513EC573D64631BFB1DE6279B6C894B280A0D257D3AF85D0ECA4FD4A8CF0C64907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "5983affc-5eb5-40e8-b81a-a4fce65e25c3", "value": "48:vXBQBCBYBGBMvzEBDBiBtBkBUBgCUfBzBoO:vXBQBCBYBGBcEBDBiBtBkBUBgCUfBzBr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177326, "uuid": "9d9f4170-363e-4ca5-9b50-64328df5356d", "value": 2905, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "5d98653a-c5b5-4123-a063-e2ceba7840ca", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18de92ad-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "e711287c-cb3a-47d5-8a22-178454307286", "comment": "Malware payload", "value": "26b928aeaf97497082d7ebdc607e320a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "2609b0be-812e-4e00-aa3b-be06d4ab782b", "comment": "Malware payload", "value": "afa8b74e0d6c56e58e673f28a16946bf4b815d6c8affb80e4bd392713a6d9bc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "ff61a884-fd1b-4b27-9c9d-bf6388aba9ba", "value": "T1BA513AC832964631BFA2D96275B688547284A0D35BD3AF85D0ECE4FD46DCF0CA4907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "eff4c7c8-d6c6-46d3-96be-0073e282e11c", "value": "48:vXQgi4QQgi4CQgi4YQgi4GQgi4MvzEQgi4DQgi4iQgi4tQgi4kQgi4UQgi4gCUfr:vXvi4Qvi4Cvi4Yvi4Gvi4cEvi4Dvi4ia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177326, "uuid": "7a1c198c-1e42-415a-8544-d42eb6517cd9", "value": 2891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "8d54631f-e9bc-4f23-b0e5-e7770ccf3f9b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18e4e799-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717177326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "e6c8e055-13d2-4b31-a9fc-fe74bcfb5581", "comment": "Malware payload", "value": "c1f2c9eba6a8ef6c20354d16a01d0c09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "76268f94-0327-4562-8cac-51539b06c10e", "comment": "Malware payload", "value": "a167609233fafb1a27d16c5ba6012524df39c7b900ff55177b771103db3c58e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "b9bd5300-dcb1-4806-bdae-e4e21c48d842", "value": "T144515CC832D64631BFB1ED5276F589587680E0D25BD3AF86D0ECA8FD468CF0C64907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "45b518bf-af84-4ea0-b6c3-29cf9d5460fd", "value": "48:vXcQcCcYcGcMvzEcDcictckcUcgCUfczcof:vXcQcCcYcGccEcDcictckcUcgCUfczce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177326, "uuid": "d1a5d6f9-7776-4c51-b404-29a7e7d6696f", "value": 2821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177326, "uuid": "749acf77-27e2-4101-8f3f-ab2e58e0db6f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20398392-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717177338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177338, "uuid": "20afc545-3542-4d87-9052-69c092fbd8e5", "comment": "Malware payload (Stealc)", "value": "2ed883684014bc6dc35e9b420c6b7123", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177338, "uuid": "7ff88b95-8696-4483-8315-44a295d5b85f", "comment": "Malware payload (Stealc)", "value": "c365119041efd55e740ada02d875f752b57c3f175b330351e6741f2af3872d1e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177338, "uuid": "13409fd9-61fa-467a-82a9-ccefa9d9e20d", "value": "T10BB5AD36B1908777F0731E3C8CBE639949267F101E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177338, "uuid": "3690baba-3c8d-4417-b74f-801edae2dee8", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177338, "uuid": "7d6e5170-e40e-469a-8d3c-324dbd81d63c", "value": "49152:wQc81KnB/a/hNT/d5Ya8aesY3Ot4N7G/:wDta/hNT/d5n0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177338, "uuid": "26e44371-95c0-44de-8eda-562f3f8f25fd", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177338, "uuid": "2930f114-4202-48b4-bb19-f7555eb006ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cc62345-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717177466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177466, "uuid": "c9c4679b-e437-4b7e-afdd-e86f7dc100b8", "comment": "Malware payload (Amadey)", "value": "d5cb3a002a6118f978c11498d40a37fb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177466, "uuid": "1dd283c2-9bb2-4eb4-b643-970064e26249", "comment": "Malware payload (Amadey)", "value": "91f4c597246f5cdc11845841a5a97be723f57ef85da0b230057128fcc8c3edba", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177466, "uuid": "dc6adb44-fed0-499e-a830-61bf38cf1800", "value": "T1099533C71CD104FDD9AC0EB5D569EFC7BA4B202ED5E17888341605B06A7B3BDA4DA8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177466, "uuid": "4f93dbc1-51b2-400b-a50e-ab20862288bb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177466, "uuid": "6b66e314-ebc5-4c22-81d7-59cd4e49097b", "value": "49152:9dnptKgWJ5jRo/p+WR7LYm5ZpDiJ9GE+q2Y6L/y:9tptpW4+WR+YE+qWu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717177466, "uuid": "b887d2f8-22bd-4157-9583-b4170efefe62", "value": 1891840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177466, "uuid": "e4d4bfda-2bda-49f5-85e8-cc7b5be80705", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afc8ae5b-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717178008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178008, "uuid": "45207a54-54ad-4353-b64b-fb58801f28a5", "comment": "Malware payload", "value": "2de14d82238bf5395e0b95e551ab8e00", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178008, "uuid": "ffe49868-d81b-459c-b5a9-8f3895c18e73", "comment": "Malware payload", "value": "aa9d5004f89fe3952e5ee0b148e6a36574d372bb5ffadae5733a7ee77127f8d4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178008, "uuid": "8d46a9e0-031a-48a0-bb59-c9a21bfb8fd2", "value": "T1E565AF0ABBEA922ADA736574CF3582655E7BBD400711C7D7A2E03A094F34DD17D322", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178008, "uuid": "57da3d59-824f-447a-9663-276eb4a077f7", "value": "14c198737dea646ad253084b784990ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178008, "uuid": "a6db6c22-799d-41c2-b99d-eeb59d14290e", "value": "24576:eL/7n6lbcC8oblH1zj1SqdAGFQZIxWC45UJoePP:+6+C8o5VzjYq+ZIoL5UJoeX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717178008, "uuid": "28b0ab22-d2b7-4418-9812-2d9fc4651e4d", "value": 1487328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178008, "uuid": "005bdef6-6d23-4e01-b634-eedbb8369f0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d637a22-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717178219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178219, "uuid": "3fd00c82-c5da-4afd-ad99-f519a129118e", "comment": "Malware payload", "value": "ec36cfbdd6ee56fd89c6fe1522fed38f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178219, "uuid": "043437c6-669c-41d0-91d4-0ba7c0c4ca61", "comment": "Malware payload", "value": "980ca951e769dd4106f08990e91b5855feb6ec1f7d9e1c333f01ded8d0678b3f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178219, "uuid": "4088a16d-1329-43f3-87a8-9edb9eed7a4a", "value": "T1A445BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178219, "uuid": "3c5614ed-e01c-4102-9a99-371cb3578821", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178219, "uuid": "96ebca5b-3015-4d5b-9131-27bbdc717486", "value": "24576:zqDEvCTbMWu7rQYlBQcBiT6rprG8aua2+b+HdiJUX:zTvC/MTQYxsWR7aua2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717178219, "uuid": "7d3bf429-d039-470b-b3dd-a0cec8b5bef0", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178219, "uuid": "f4ef22ea-4ac4-4ba5-a500-632bce7456b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f16bb41-1f79-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717179429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179429, "uuid": "7e844385-1c5e-4201-bddc-8daab1ff0f9c", "comment": "Malware payload (Stealc)", "value": "f3861de1a139aad9c36805c2ba635e53", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179429, "uuid": "a3f128ff-0c00-437b-a2ec-fca6d7762a3f", "comment": "Malware payload (Stealc)", "value": "94a861ab4039d79b1fba1f800b16b1462fefda696ca10c6a41090e4d092c0ac6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179429, "uuid": "80c7c1b0-8a34-40fe-bb6a-d6801dc8873f", "value": "T187B5AD36B1908777F0731D3C8CBE639949267F201E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179429, "uuid": "47227ea4-fd31-4cf1-8cbe-defaae886ab5", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179429, "uuid": "75e2d4c3-5079-4698-84f3-fddada319dda", "value": "49152:wQc81KnB/a/hNT/ddYa8aesY3Ot4N7G/:wDta/hNT/ddn0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717179429, "uuid": "ff452a10-3b31-4140-9aa5-d276cb2c895d", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179429, "uuid": "8000aea0-357e-41ab-8b19-1377de3459a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3727b03-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717179759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179759, "uuid": "fada8169-84f7-4328-be9d-31c37f453100", "comment": "Malware payload (Socks5Systemz)", "value": "b566228569de7391a58b0746a6c8d5b5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179759, "uuid": "a973ca31-3b22-46eb-ad05-eac3c4c965ff", "comment": "Malware payload (Socks5Systemz)", "value": "61a4c9b68f724d3762fdb946a6dbecbdb0f5eedf9a7f9fa19d3ed9e4bf7c5cba", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179759, "uuid": "74241af4-3e99-4e39-889e-9e8e74e2e289", "value": "T1FA36332090180935F2B89E3ADDA8C45B897B8C4415F37D98DE7CA8BCCF735B9915DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179759, "uuid": "a36f0469-d3e1-484b-ad5d-686ed854f5e8", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179759, "uuid": "c131ad66-45c9-4985-bf02-edd1c4e3b55e", "value": "98304:mCnChH17SXmN1Qun8PD5LVogzbAFD9TIW5m2MG2MV8rh3hvEdHOW0OorYg7XkXBW:tnaH17UmN1OPFLVoge5TINjQernv6HON", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717179759, "uuid": "2657922f-b2eb-4a9e-a383-ac50b79b47ac", "value": 4965730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179759, "uuid": "8b58fae7-7790-4a38-b85d-928723411df7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cc68752-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717180768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180768, "uuid": "8cb3cf59-2f31-4fff-91f6-f0778e83ee1b", "comment": "Malware payload", "value": "0161ac4274b418e8fb21eefe25d35e90", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180768, "uuid": "c986d406-b5a2-4e67-83d0-7645a815ac52", "comment": "Malware payload", "value": "1693f3d3e16e1bdceb9fc1fdb952397eeb524306c7ebf41e53f2beb28a588d24", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "ready.apk", "colour": "#104a5b", "exportable": true, "hide_tag": false }, { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180768, "uuid": "9fdfb6e5-031e-4a3c-8161-678c5a66d1eb", "value": "T15F26E107FF49DAA6D8BA83F16B370D992E1B0F18C652AAEB0510767D2D771C10DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180768, "uuid": "e75b90e7-d92d-45cc-9b99-aa519bccd74c", "value": "98304:zEux0R7tlWbmAa4mzZzBwTR0tZUhcVDg7jjgNmmS:zEuxIJAbjaHzguOhDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717180768, "uuid": "db20d20c-7017-4153-85cc-116bc484d19d", "value": 4583769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180768, "uuid": "0999871d-c8f7-49e8-9c86-b66ad75ca4c8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "605403ab-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717180881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180881, "uuid": "b4c3191c-d40c-493e-96a0-b85260e0bef0", "comment": "Malware payload", "value": "7165b2b6dd81ec8561337a47944ef8be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180881, "uuid": "8741d7b7-8c91-4cc3-978a-219e2052ed45", "comment": "Malware payload", "value": "77034b002ec9d650ee9bb3f2f27564987e3e2e15d14edb1e699660b3baaae736", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180881, "uuid": "73747af4-60c8-4811-a1fc-fd3983817541", "value": "T108B53353793764A7E6E888F598860E01FAC5A83C2DF8D7BEBC51263D42D36077843B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180881, "uuid": "4fa6d9c3-cda4-4ec5-995d-778f926aad54", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180881, "uuid": "d9594f03-e08d-4a1a-8a94-8da82e6a610f", "value": "49152:RKbFNEjV1HiN+8+rFQZWy3X2V61r0qR5DALTcx7rk:RE/Ex1CN+NpF0XZ5DD2ork", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717180881, "uuid": "ab0930f8-34dc-43d3-b748-8f5ab9b2b0a7", "value": 2473984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180881, "uuid": "6fba6356-14dd-4a92-959e-46b3108b933c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9bc9540-1f7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717181998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181998, "uuid": "ac935d12-551d-440c-8c9e-dc838bfed6ae", "comment": "Malware payload (Amadey)", "value": "c92511ab64f406ea8ada7406c3e7f6ac", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181998, "uuid": "63bc4273-3a7f-47ec-8b96-0a757626d58b", "comment": "Malware payload (Amadey)", "value": "d9da99c84aabbb2498b2ffef9210dce5a5a8ff9cac512f7bb3c50f68dd8ea043", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181998, "uuid": "d8375310-ba67-480a-a67b-4f81b63d7920", "value": "T18D9533357FB2B821C25D96B005EAC9D051B1EE88FFF4CA293E1B917681B7591E7231", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181998, "uuid": "18147bd8-cea6-4fcb-85eb-de033bfa1168", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181998, "uuid": "a695efc3-b56f-4f02-a795-f248936eaf8f", "value": "49152:DgezMI+XwXFpz0LFsnChJn443Rxt6jhx9+:7zv+IpzewChJn4at6js", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717181998, "uuid": "4f2bd715-a38b-46e1-b27b-98b56c95acba", "value": 1896448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181998, "uuid": "c3d8accf-ce09-43df-b353-131fcc59125c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "110139bb-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717182037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182037, "uuid": "43a62eaa-37ac-412b-9e50-8406721636a0", "comment": "Malware payload", "value": "101b0ed07844415919a66c0dd06498be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182037, "uuid": "be9f542b-564a-4f5b-b475-902254b3ec48", "comment": "Malware payload", "value": "9d8e6da835c4db07b182c374884d685e8e170df5c50f56a86467aeb810fe385c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182037, "uuid": "46a5bcba-024f-47f8-9eb1-9e8f6a11f160", "value": "T109159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182037, "uuid": "49e67618-5f74-4279-93bd-20c53c1239cb", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182037, "uuid": "7398aa6d-3733-474c-b8b3-b394cf4505bb", "value": "12288:qqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4T/:qqDEvCTbMWu7rQYlBQcBiT6rprG8aA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182037, "uuid": "3722f3cb-a17b-48f4-850c-c148179d8571", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182037, "uuid": "d654b6f8-5ece-491e-b596-5ef776812e33", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25437532-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CobianRAT)", "timestamp": 1717182071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182071, "uuid": "4908cf6e-d60a-49a9-8de7-8bdcebe1de44", "comment": "Malware payload (CobianRAT)", "value": "0c2564813f2b9fc088cfb6938214d3cb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182071, "uuid": "c720f3e4-88e8-40d9-a9cf-8bd851f41313", "comment": "Malware payload (CobianRAT)", "value": "1043faf46b5a19cbe10410e01725b38caf0db7f36b73c68e103ebca8da2d18d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182071, "uuid": "98ede92e-74fe-4dc4-a9d5-ee1c6246f78c", "value": "T139D24B8963E18732C97E677B06B3926013F48F139613EB4F4ED4B4A92EB37114A51A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182071, "uuid": "ffd81888-d42c-4412-ab5c-dc8c55d7318f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182071, "uuid": "58c1a42d-c2e6-4aac-9fe3-ad67e850adfc", "value": "384:pNZ3hei0OblBcTZPR6Vc+nEscc/IJlNVVNDpSIw39qWrDk2kMK6KUkyoseNegUE5:X/3ZsZPR6VdBgJlNzOSJ0C1No6Y4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182071, "uuid": "3c9a1a5f-e61e-46b8-8130-bca1da09e453", "value": 30720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182071, "uuid": "ac7387d7-f38a-4ae7-8d58-410bb71c8c19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "262df61b-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1717182072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182072, "uuid": "d0d51bd2-b2bf-4f2e-b943-6a44e13aae63", "comment": "Malware payload (AsyncRAT)", "value": "c6ea25255fd7c184d6dfb684ac82e351", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182072, "uuid": "392c555e-6897-4b95-a035-bfcb3a1ad0fc", "comment": "Malware payload (AsyncRAT)", "value": "c1f22a60d29d14993576ee6093144960dd3b0c181569fd41c913b8d38ff3debd", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182072, "uuid": "32a3182d-3ee4-46d9-b870-5652adac51ec", "value": "T137942320270A277BF58DDA70896612C56EBDFBC3D752852C49C819F62CE2229EF31C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182072, "uuid": "63175f83-fff8-4bf3-b7d9-ebfbc173415b", "value": "6144:Av0e3NdBFTOBJpuRrHh1phb3S9AFCACDXywV5R8wQU5dya8oRY2D/J8YUFvSs/j:OJfBBHhxTScrCLywV5Gk/XUFvS8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182072, "uuid": "bcd6c54f-41b4-427d-9f51-b9fc7bd50899", "value": 440008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182072, "uuid": "d6fda216-db5a-4575-9695-1baa1dce8e94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "272bc80d-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717182074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182074, "uuid": "55ca78b2-205e-40df-884c-70bea7d1d9a3", "comment": "Malware payload", "value": "66a5a529386533e25316942993772042", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182074, "uuid": "d1df8afe-a710-4692-b8fa-5ebf7414b21f", "comment": "Malware payload", "value": "713a497c8da97c2082758fd31147539f408a72b62041c6c9ed77037021621e94", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "d9aa2514-d538-4864-af7b-183e205888a5", "value": "T1C9563352675B457BE9D31C323727C30344F4F58426996E8ABA1117E2D8806EE2F2CA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "31abe4e6-9dce-44c5-94f0-eae591903031", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "33615909-2f36-40de-95dd-46eeed819b5b", "value": "98304:6QqmVoQ/tUAh8ggYJCHtEFy3X1mDyV/w4qp/tkC9+yZ+KZ8dSHLNejiRuO+4GiW:6QqmVo481z1mYbWSCeKhxqr7h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182074, "uuid": "d67362aa-2e64-430f-9f8a-fe59b51da7ed", "value": 6200810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "cdc9a1c6-7674-421f-acd1-0feba862de79", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27594d7c-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717182074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182074, "uuid": "43ae5a1d-881c-4584-b432-d591f613293b", "comment": "Malware payload", "value": "188fbf5c7b5748e1f750be2bab44e0a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182074, "uuid": "e49909e2-7e2e-4e28-b411-dad2c32c2748", "comment": "Malware payload", "value": "14a23a25c21deba6f3a85d2e24085a95881302499bcdde6dc9a585fe46b9f370", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "cd341cb1-64c7-44f3-bd49-080d0ca747db", "value": "T1841523F24D73FAA24668EAF8E2DC8DB531837BAF09D477F4484AC5543A17D0C66BA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "416afafa-4586-478a-abfc-fbdf87ac1531", "value": "24576:gxr8MkhjIuPK2Yp5hKOlAo6Di9+ERF7YJCgLG6E:gxFUTSJKOlAo6Di9Pf7eC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182074, "uuid": "c59a35b0-93d2-446d-8ed8-f614a4eb5299", "value": 956003, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182074, "uuid": "089607ae-0254-46dd-836c-45033b2da33a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27db6190-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (DanaBot)", "timestamp": 1717182075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182075, "uuid": "e94c0d1f-8f6a-4511-89ba-f19e439587da", "comment": "Malware payload (DanaBot)", "value": "1a1f3a7eb8a6d3bcdc8f0ec12c1ba0c3", "object_relation": "md5", "Tag": [ { "name": "DanaBot", "colour": "#860d30", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182075, "uuid": "3a6a187f-09f3-4afb-ae7e-cb1f970358cf", "comment": "Malware payload (DanaBot)", "value": "7a767f24ab132a97cd93e3a0b8ba973dd4a93ff0a5cba098a128c624f6c8a306", "object_relation": "sha256", "Tag": [ { "name": "DanaBot", "colour": "#860d30", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182075, "uuid": "9bc1cb29-baa4-4894-9717-1d55f18f776b", "value": "T10CD5331E00DD9DA242D07F7CBC8F1D5B1107527B25EDCB1E66E97E0279666B220322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182075, "uuid": "544dcca0-204f-42c2-9ed2-c9f093d71510", "value": "49152:8LLno5CUn/JBpGjVJvreGcBofZUzPbszwgpG6vxgNEF4V5xLedR:8LE51PEjresfojqwQvWzj4R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182075, "uuid": "8b6ae915-70c0-4fb9-910a-b81d34961a4b", "value": 2822678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182075, "uuid": "2a676be1-c77d-4818-acf4-b45b5c39e9c4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37bdc872-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717182102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182102, "uuid": "24a7c2ac-4aff-4e8c-bba5-003884286c58", "comment": "Malware payload (Amadey)", "value": "549e8523b8209999c3049727061f6734", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182102, "uuid": "8582f6da-d659-484c-b7d0-14b5a20d8d1e", "comment": "Malware payload (Amadey)", "value": "a6bb57327c0e09dce702ade3705f7bdb3f7d3f4f544ad5f3c3b786b7aa17804c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182102, "uuid": "102f9091-51bd-4767-9ba2-80c305f39576", "value": "T1928533328F4EB082DA4499B478789D1B37E5296F49EC731685CC0A2D4FEF6C52D924", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182102, "uuid": "da6b1e05-5686-4e4a-95ef-e973bf1b6bd4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182102, "uuid": "0b2a480c-e7cc-4ac6-9c01-4f8e2ba2e12b", "value": "24576:cpSss0OyxWDtQzXWuZmEtKlgS5FyKRHFPtI1vtCEO3VYayDi/3Ckp1NVX8Bsacz8:ND35s7EXyKd/8YEO3L1fVX8BsbUm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182102, "uuid": "1f8c31ed-ab78-4fe7-a504-69bcb4753ba5", "value": 1866240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182102, "uuid": "3a58e34c-aeee-4895-b756-3902930fc7aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4159103d-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717182118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182118, "uuid": "80b70d26-959a-4141-8734-f4892f3912ad", "comment": "Malware payload", "value": "5f419266e5b1f1e4c55f662ad2de0ccc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182118, "uuid": "419ab943-9fbe-4a42-9982-1c2a05d0fa6b", "comment": "Malware payload", "value": "e91b23f9d816393bed397b9d4f860a42bc2b1a6b15bd648ce8e05d5e5bdb1806", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182118, "uuid": "8dfe4304-78d5-40e1-8238-f45c24821fea", "value": "T19C45BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182118, "uuid": "47974ea7-87c6-4b5b-bff9-c22e05b64933", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182118, "uuid": "37c472d6-a0c6-41ee-864d-d62fd27e3d5c", "value": "24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8auW2+b+HdiJUX:yTvC/MTQYxsWR7auW2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182118, "uuid": "a609d3fb-244c-45bb-bddb-4f03677bafbe", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182118, "uuid": "d1e7249c-4cc8-44a1-af72-152fe323afa4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a4a843e-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717182133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182133, "uuid": "ac1222b2-a4e9-4dac-936c-07057ee22a25", "comment": "Malware payload (Stealc)", "value": "30c7382da514800655e662eb71c854c1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182133, "uuid": "93d1b8fc-b9aa-4758-8168-ff6e9ebede89", "comment": "Malware payload (Stealc)", "value": "b0f3badb351495c385ebe7893d2a6519f9540f0641f2c57153c589f96a357247", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182133, "uuid": "aca18bf6-d059-41d8-ba14-48af7d8b0b50", "value": "T12EB5AD36B1908777F0731D3C8CBE639949267F201E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182133, "uuid": "6f7f8fb8-1044-406b-9fda-ae779a25d23f", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182133, "uuid": "8225d551-c851-4cd7-8317-cf09e00542da", "value": "49152:wQc81KnB/a/hNT/d9Ya8aesY3Ot4N7G/:wDta/hNT/d9n0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182133, "uuid": "7ff95c51-4b84-4a66-ba38-03d553ad1fe6", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182133, "uuid": "c5e15014-b695-4cad-b113-368ab88385af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b2912d-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717182176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182176, "uuid": "e8ad7b5d-13b0-4f3e-8d56-f06098b9ecbf", "comment": "Malware payload", "value": "431878a010a7b34c8e54b5b75ffbade1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182176, "uuid": "314924db-a768-4f2f-b9f2-70a1721fc60d", "comment": "Malware payload", "value": "889f3c9f919ade07dfd0c6615d5b81148f6a82946cecd07ad68c627acbd7167e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182176, "uuid": "0fab4718-d4a5-433b-b73f-e23952378f9b", "value": "T1110833FBFC1B1AA6F57DF237A9712EC8853C9941E5064475806113C368CFBE6AB281", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182176, "uuid": "92669300-d1fd-488f-ac8d-5b28abae3f70", "value": "1572864:4NvXhwG6GYQfMKTCTefFjvkE0AWLWcrBt7FSLqs:KvXhchQNfJx26CBt7FSLqs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182176, "uuid": "0a397848-343c-46c2-b5fa-e7548c86b211", "value": 77908292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182176, "uuid": "fe2e123c-03a1-443d-ac30-d670c5f55f37", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d8edc7b-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717182273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182273, "uuid": "226345cd-0bee-4b3e-a92b-b2ab729c83f0", "comment": "Malware payload (RiseProStealer)", "value": "fbc1bc89d55ccf9a33cfe4c4028883f0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182273, "uuid": "8a871a37-5c72-4d72-a523-f956cd98ed42", "comment": "Malware payload (RiseProStealer)", "value": "ca2c3ae1920df898b39ef208114059a42ac29c943f476d6729d6a23f4989451d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182273, "uuid": "65643bfe-cb19-4904-abea-fbfdb53207b7", "value": "T1CFB533FB8F269470DECC8D37A982C32975383A446E06A737B44FB22815636F567B09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182273, "uuid": "ee0f5288-ee9c-4ed6-a150-2e915c9eef87", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182273, "uuid": "c5b16188-834e-4ed7-b696-e020fe8d5922", "value": "49152:kkmKhyq24kI3qebVaNFn1ibyXRnk0LN+dt15tSLOw6NWtqo1Iu0ulAzqhL:kkmKEqlkAbkL1ya5+R58iwiWgo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182273, "uuid": "6716ec75-f0bf-49bd-baf3-a7dddc1275f7", "value": 2322432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182273, "uuid": "7e06f529-f10e-4987-9c5b-a73153ac01a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b7e88d5-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717182645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182645, "uuid": "434a8e55-fdff-4a5f-8f86-9951b0559373", "comment": "Malware payload (GCleaner)", "value": "2fb850958c020f0ed5dff336b40101fa", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182645, "uuid": "0272efb6-9c0b-410a-94d5-631b1c1346f3", "comment": "Malware payload (GCleaner)", "value": "9afd569b15b5919ad1b8d6cbe8c082cd8a40b75f5ac03efb4a7c7450314e87df", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182645, "uuid": "f6bbf281-ff1f-48d7-bd1e-56f1b22dabe3", "value": "T19C548E4372E17C43EB668A719E2EE2E8B72EF990EF49277625046A5F04B0171C12F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182645, "uuid": "dcee12b9-fa23-473b-8f95-dc14dc107484", "value": "e05e1c67740ee1284ec193788785fde7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182645, "uuid": "1e9b59d9-ded8-4494-9e73-d14ab16c7410", "value": "3072:+6uLtCHtOUv5LzIc+4e6gvjeqLhagwf8DjCc56Ge1Ei55GNs/IYE:E0FZv+xDremxDjCckGeKPNqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182645, "uuid": "6950351c-8cde-4b11-b035-64e6ac234b88", "value": 281088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182645, "uuid": "83779688-40ab-4ea4-87db-576a472934fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "479ff53d-1f82-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717182987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182987, "uuid": "d8723c8b-aefa-49f1-b0a5-61143f4cab06", "comment": "Malware payload (Stealc)", "value": "fdb72109edaad429bf9f89a22f0d7da8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182987, "uuid": "ecc5eb2e-6912-4d3a-95d2-e105afe23a53", "comment": "Malware payload (Stealc)", "value": "7b056209562958d74882da961cad28601113fc5f4729a4f3823da50f722da78f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182987, "uuid": "6a78b5a7-6847-489e-80d8-4b2a48d52b7d", "value": "T1BDB5AD36B1908777F0731E3C8CBE639949267F101E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182987, "uuid": "22cc08a4-1352-41af-9714-60ff49fac59b", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182987, "uuid": "101d6361-f621-4d4b-a7eb-06e3eae2e98b", "value": "49152:wQc81KnB/a/hNT/dNYa8aesY3Ot4N7G/:wDta/hNT/dNn0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717182987, "uuid": "13b8becd-2bc7-4a2e-824f-083eda965774", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182987, "uuid": "c86c0bbe-4037-426b-bb1d-a0c7a403aeb7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73182a7d-1f82-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717183060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183060, "uuid": "cf54d83e-8c2a-4edb-b7dc-a1d651f61998", "comment": "Malware payload (Socks5Systemz)", "value": "9c4d2b09fe3dfe517c5e2c3a9f478139", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183060, "uuid": "9be77b6a-9c21-4f54-8a4b-b7379d003b59", "comment": "Malware payload (Socks5Systemz)", "value": "e43c6f1f557dbe34772ed41993bc4e5e8c20c5322b0247c263ec92ffdc7d4e30", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183060, "uuid": "1da5d890-c083-4814-9057-a7cc0fe1b9a0", "value": "T1C136337494BEDDB2F203B7FA1FB80642B5B1BD9226FCC025144F59818753199284FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183060, "uuid": "37ac43e7-62f2-45a9-ae7d-8876bd8e247b", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183060, "uuid": "40dc973a-3282-4653-b6bb-eac03bd1ff1f", "value": "98304:mVgk+N7FiseoYaHmVrlxydkozjrOLGF0KbqMBrnoj59fJo1aSNN76mBNAUN:ygLpiseozdDzjrBHbqMByno1awVPB6UN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717183060, "uuid": "254d526b-0c38-448f-b560-39abf47e56b6", "value": 4985659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183060, "uuid": "9d753863-b4a2-4aab-94ac-c5f3e414de53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16862a84-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1717183436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183436, "uuid": "32ff3b34-2660-4137-9ac9-a0a79157da2a", "comment": "Malware payload", "value": "3f5605d15ff19e86b136c29857d93101", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183436, "uuid": "bc728bfe-4678-4097-8b9f-c71658b4edd4", "comment": "Malware payload", "value": "6d1a5e0ef0615180c6cfc9e2194a82c32b7992a3ec3073547170797515422eff", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183436, "uuid": "4d43df1f-cdb0-41fa-8dda-7b00a8ea6cc4", "value": "5473121623A92971627146F1E7FE6F8CE10D3A688FF16C247C217C68B93236E5CD8519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183436, "uuid": "bd9e84eb-3592-411b-931b-46cc789f4317", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3O:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717183436, "uuid": "5f6cb547-932f-41cf-8b6a-9e915d34dcc6", "value": 73848, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fc82b1a-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717183511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183511, "uuid": "2ff13e27-4c41-49a0-8748-bb8bc3a9c084", "comment": "Malware payload", "value": "811cd0f80b4d398e916da85139542bd5", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183511, "uuid": "faba511d-d66e-4087-823f-1cc4ce1b081c", "comment": "Malware payload", "value": "7d5521d73995793d0459cf40e6ee19ee2f27b8f5dfd786d1050c125794a2bfea", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183511, "uuid": "e56aded1-2af8-466a-a7cb-500ef648fec5", "value": "T182362372B117BDCEEBBA0C11EA403A528C9C6FA7174B857CB5C11B9625EB904CF749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183511, "uuid": "b2af90fd-f98f-40e7-9d4d-271f08dcb35c", "value": "98304:8DwvLu3hIJofI3PlyLErLXfiGPd1YBJO1XXKVntIW9S6JzW+zhsVm7x:hLuxjicWV6BE569UcNx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717183511, "uuid": "caf3666e-a499-40f8-96db-1f7e6208abd3", "value": 5147534, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183511, "uuid": "764b6135-cd58-4d08-9c16-cc6a272d4a6f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ff2e082-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717184639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184639, "uuid": "01b51e15-dbb0-4dd1-97f6-8fcc2ad4a84a", "comment": "Malware payload (GCleaner)", "value": "676e17bd58a6138b70045498fee87491", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184639, "uuid": "53c9c909-db62-45ea-bc38-96ad3e5f728a", "comment": "Malware payload (GCleaner)", "value": "4a806e22faff398f931272b8df2acfca7acffaffa503f9dd48b78d25ebf13684", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184639, "uuid": "f44b8825-bd76-4107-969d-20062aabcfc7", "value": "T12A649E0392E17D13DB624B329E3EC6E8372EF9507E19736662146A6F18B11B1C52F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184639, "uuid": "8b73bd29-93b4-44d6-a720-97731e259c2b", "value": "0bda43dbc99650e3960b130403865133", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184639, "uuid": "e94f8b5e-c7f8-42bb-97fa-603c13aa749c", "value": "3072:MCu6P00DbzXJ+iSvty2F1Vc0+Hx5qDRYvPWAVzCtR9qCKqK+Oknwl+vpAJomGrOy:R0qDMFl+0+RkDe3WBCXkwE8+DTrTqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717184639, "uuid": "0590d262-9b65-4164-a5e4-b60a88a16394", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184639, "uuid": "6c4390c0-51a7-4595-81d4-195ee777d2b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e25154e-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717184690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184690, "uuid": "3201afcd-9c6f-4ff3-8c3c-6e5326e7c611", "comment": "Malware payload", "value": "a4a46b2633b9c6b5ea74e94351fc1d22", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184690, "uuid": "521e0915-4fb6-4c3a-a8b0-644d0a37a9ff", "comment": "Malware payload", "value": "18f93c2742fba094592ef8c974bfe5c8fd790ce477157ef11f95e982355b151d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184690, "uuid": "479ce861-edd3-4fb0-9060-5e701f9a2c44", "value": "T14674BF0352E1BC53EB6A8B368F2EC5E8771EF890AE49276521186B5F14B1172C16FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184690, "uuid": "efde0f13-ebca-42c8-8c74-fa3d1fae10ef", "value": "0bda43dbc99650e3960b130403865133", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184690, "uuid": "2049e308-255e-41b5-a6fe-7279c23dd2c3", "value": "6144:Mcu3fmGxP8iG2t2EwIW3Q91dJOp/paOmeCPu6U107+X+AE:McgfmEUiRtCIWA7OmY67e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717184690, "uuid": "5b29e923-1aa8-44dc-b15b-ff735d97767e", "value": 351232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184690, "uuid": "1a03f7f0-4b50-44de-b941-7069794e66a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9ed6d1b-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717184978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184978, "uuid": "8caf8f2c-c3b4-4ba5-a979-ae29c46f405e", "comment": "Malware payload (Stealc)", "value": "2fb295a9d703d911074cb65561204515", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184978, "uuid": "1d2f0688-ee6a-4796-bcdd-d6a5adfad571", "comment": "Malware payload (Stealc)", "value": "5b4afc7dc30647ce4ac338596c909330f36933a2f442475311522726732e2f83", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184978, "uuid": "f40b12a3-84a6-4fa7-b2c4-8c5a701aeced", "value": "T163445B1252D1BC43D72B8A71BF2ECAE83B2EB840AF496777E1046A5B14B11B1C1DE7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184978, "uuid": "63b16929-74f0-4e12-b8dc-53207600238c", "value": "0bda43dbc99650e3960b130403865133", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184978, "uuid": "2f53d1b6-e37e-4586-a4aa-8cc5125ddd79", "value": "3072:1KuTUfSiyWwfftB/d7jEsRYNanQzc6PZmeMLg5ESFO/IYE:/UYWWlB/d/HuIQc6BmeMLaFQE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717184978, "uuid": "2ef2c51d-5c62-4f0a-b6ba-54a24c5495a9", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184978, "uuid": "4f144c13-09f2-46de-b10d-67540aae8677", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89821f10-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717185245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185245, "uuid": "c95aecab-e6a0-4e6b-bea4-877ccbf76f3b", "comment": "Malware payload (GCleaner)", "value": "d7e6acec5056ddb451a11d242f635482", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185245, "uuid": "0997061b-29c7-4add-9228-5b3ada7d0e40", "comment": "Malware payload (GCleaner)", "value": "ce6895e933e54fc860e50ff4f054c4b40e0b25c4b6648ad59794842b33914d7f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185245, "uuid": "b928b538-d491-4ca7-9638-92b47d495a13", "value": "T12C548EC351E1BC47EB274A727E2EC6E4771EBB506E4A637962046A1F04B2161C19FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185245, "uuid": "db0a50d3-fe72-40f3-b135-fc40facc263b", "value": "0bda43dbc99650e3960b130403865133", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185245, "uuid": "d16c2df1-3a25-48bc-9bd4-d48f1fb1ca2a", "value": "6144:CBylf8DqJ/cx15ZW27wJDzbBYoLbzLbFE:wyCDq5cP5ZYt5zz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717185245, "uuid": "8cf06fc0-fa28-4d7c-8c1d-5a78860df40b", "value": 281600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185245, "uuid": "55015d05-a47e-460d-afe5-a5defefc439b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f7d9185-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717185685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185685, "uuid": "97168a06-784c-43fb-b798-04a50dc7d87f", "comment": "Malware payload", "value": "c82b3706d7445e23bf1488a5201f2645", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185685, "uuid": "a2352ae2-8785-4733-886b-a9a3a07e1f43", "comment": "Malware payload", "value": "ffe6ffd148b8e25851ab7c67440a5fdf3f49b44834fdee57f2c46765ab2229bb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185685, "uuid": "08bb992d-7815-4d24-809e-b69e674358be", "value": "T195159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185685, "uuid": "d911f62b-c192-403d-b7ac-63e04d0c3176", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185685, "uuid": "38045e91-532a-479f-a58f-c56fe21387b6", "value": "12288:uqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tv:uqDEvCTbMWu7rQYlBQcBiT6rprG8aAv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717185685, "uuid": "757e0aa9-c2fa-4fb3-a157-4e7f21e18a93", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185685, "uuid": "418f53d7-f9de-45fc-b4f8-5a11862282d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a53da675-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717185722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185722, "uuid": "878adec8-733b-4966-a872-47eda80cdfc1", "comment": "Malware payload (Amadey)", "value": "a065c54f7cfa67b7296980749ab514a9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185722, "uuid": "ef7f06ac-c880-4424-b6de-e0eae6eaec35", "comment": "Malware payload (Amadey)", "value": "77a2d44d739de9036c0a7201e0e1f9b8ca33303eb5035900e4478d35975d52db", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185722, "uuid": "49adad89-c293-4fee-b345-45d3c0d19db8", "value": "T17D85339B2A3D365FE29113B5023323C365E5452E69FBE23BB6AD411212FF3752681D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185722, "uuid": "ad47f4ef-32b3-4c81-addf-d57e1a32fffe", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185722, "uuid": "373a9de5-c3bb-48d9-a552-8e528cf23950", "value": "24576:zvS+gN67ZU3HHtSUa6QgxJO+W6ziNroHJCVqOxGUlPh4sZRCT3NljRDTpaAcT/Gg:byA7wHN95OIzs4J6tGYZvZ0t7cT/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717185722, "uuid": "da72b0c8-d04a-4148-a8c0-1addd8439313", "value": 1853440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185722, "uuid": "06da1e58-17ac-47b7-ab98-50d5b11239a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf2f0fc-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717185812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185812, "uuid": "5d688788-4ef4-4f35-873d-a482f62e1553", "comment": "Malware payload", "value": "45d459da95b816ab6a64a5a3ab1a68eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185812, "uuid": "0cea0978-7b2c-4bbf-996c-08cab72f61c4", "comment": "Malware payload", "value": "a6ba82efe79c102297e90e700f9ca348e0d74ae98e90ed0731ebc1f5ea06772c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185812, "uuid": "6eaa6c35-ea7d-48d2-814b-f60a5d8cd1b7", "value": "T10845BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185812, "uuid": "52b65ad4-1075-4d9c-af1b-fa529c571f2f", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185812, "uuid": "84201d61-8e8a-4bcf-b05c-6804f6a86054", "value": "24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8aui2+b+HdiJUX:wTvC/MTQYxsWR7aui2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717185812, "uuid": "b4fb15c8-cbe5-4204-82c2-64fc29bbb939", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185812, "uuid": "6e21deb1-7eb3-4586-8b5d-57a2ff5c95f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8e0a48d-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717185835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185835, "uuid": "103d3cba-ae71-47b1-9db5-e64c3188193b", "comment": "Malware payload (Amadey)", "value": "5bceec457a7d573ebbfc6644780c6e26", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185835, "uuid": "97104097-c09f-496b-b910-eb7724301814", "comment": "Malware payload (Amadey)", "value": "39f4f832f30f42ae92dd93ded8f6e0aea2bfb52a11e62512d3af267891eb765f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185835, "uuid": "5eb3626e-0776-4976-80cb-c24b5aeaefe6", "value": "T1769533CE46A3B883D2D38F3FC09BEA36576410445CBEBC47A609B8EAD4E7D557D209", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185835, "uuid": "a277137b-6ff4-453e-9969-f17b2bb49c7b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185835, "uuid": "f1fa12b6-3b19-4b73-a4b9-311c7c33b215", "value": "49152:i3UxjvLBe7f0YjhafTfneb/KibjQRQLQ9ob/gM4G:oIQf0pbeWivnCC/P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717185835, "uuid": "67819a8d-c207-4c5e-9bd6-dd84c37ec491", "value": 1935872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185835, "uuid": "528532a6-2ed7-4315-bb75-000c8fba3021", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a20a81c5-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717186146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186146, "uuid": "7ba27d01-818d-4164-9e42-07930ffcd5da", "comment": "Malware payload (RiseProStealer)", "value": "aa1372ce006fe8e0c17895f64e32f48e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186146, "uuid": "84277b95-c4dc-421e-bbba-bc924b8e77e1", "comment": "Malware payload (RiseProStealer)", "value": "4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186146, "uuid": "7d96bc26-4e8f-4e7a-80e8-cd3a608004ba", "value": "T1CEB53357BB6A0D32C9DC0D33C8B1019622757E1A8D15AF33A50EB8580A83FE9E7F45", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186146, "uuid": "82ff3642-3e25-4391-b3ed-871beb54d3f1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186146, "uuid": "7fa9564f-85d1-4f04-be95-15e581d6851e", "value": "49152:jkmKhyq24kI3qebVaI0SPBTfWgxzP9gGxavMpsi7clfRd9W:jkmKEqlkAbkI0SJjWEzPWRMii7cpk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717186146, "uuid": "7556bdb6-2a0b-4d09-b2b2-1374da2457e7", "value": 2323456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186146, "uuid": "deb2aae5-3cb3-449d-8dfb-9e1c0b8cf3fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b72e3ec-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1717186349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186349, "uuid": "2de10e7d-1ea9-41ef-aed4-15cd204e63c2", "comment": "Malware payload (Adware.Neoreklami)", "value": "fd849a970e8cd455d2b554fba3ff1a60", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186349, "uuid": "8a8ef8c5-35f2-4287-abc6-2bd0b370be15", "comment": "Malware payload (Adware.Neoreklami)", "value": "595bc46777a5fbc58942a11dc44e0710f7a7d9f36ec3bd841733b06d6b594700", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186349, "uuid": "5f0852fa-5307-4dda-ac65-6a55870381b2", "value": "T1ED763310BCFCCCB7C3430C37DAA57B4AD1BE88981E9D985BB7F951CA2679D8656207", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186349, "uuid": "61380d8d-502f-4f9a-82ba-d2a11f444206", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186349, "uuid": "cfa09a08-c010-43cc-be0f-9f1a1b18f4fb", "value": "196608:91OvMyvIyGyWYOzs8u8D9rUNvYi2vS1ZB2mkrKVfOL:3OvTWYOzun2KPsmkr1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717186349, "uuid": "dd816072-587f-45d3-b6ca-70fe1296daee", "value": 7630110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186349, "uuid": "e516efc8-f77e-48c4-b76b-f101501fdf5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ef69a97-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717186382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186382, "uuid": "a899dc83-1383-4891-a0f3-4d573d4963cf", "comment": "Malware payload", "value": "00964e68c42601df39dc566af06b0190", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186382, "uuid": "399b3ec1-abe6-4f09-a765-b438a112d842", "comment": "Malware payload", "value": "bf5bd2f02647ee9e4f179732f5586fce8076ec18bb14fc9f783dfd5ba2c2bceb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186382, "uuid": "3ab6c3e4-6141-4cd5-80eb-9174ab563f64", "value": "T1CFB533113EC69552DE9F5B301B573890D7A682E35BB682BDB7C260C90E4C2CF162DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186382, "uuid": "ef3b4d4b-f584-4057-a310-1eb43b116f3e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186382, "uuid": "9382cb0e-9254-4491-9524-56b9c6d170ee", "value": "49152:z78cjoyjaWF626QyVj+9siuS5r1U4VADfnRdczZ4:zyyGWvP9Hd/VafRdcz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717186382, "uuid": "769ccb0b-6363-4296-ad8e-929bb9f13afb", "value": 2416128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186382, "uuid": "e9a12ed0-492c-4ab6-b6e8-37c116541644", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2b8460f-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717187059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187059, "uuid": "82dea567-ca45-4a2f-9f6f-c1192a4f9ebf", "comment": "Malware payload (GCleaner)", "value": "86b73f41a9b2bc749c382c98a8538887", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187059, "uuid": "ea34a27e-43ad-4a31-8cf4-39edcdaa37b4", "comment": "Malware payload (GCleaner)", "value": "f7c26dbaf8e32f7c68ebfac8a68125bcf8722986e82fc0c6b27acc1e68f0a3f4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187059, "uuid": "82d791f8-bf3a-4cdd-b118-34873c42efbb", "value": "T12B64AF1392F07D13DB654B769E3EC2E8372EFD506E05736A21156A6F18B11B1CA2E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187059, "uuid": "9ebcbae7-4e1e-491a-8147-11f036a5eca9", "value": "0bda43dbc99650e3960b130403865133", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187059, "uuid": "d1b6042b-f200-4e2c-9da8-d6755c1573f0", "value": "3072:IiuJ+GKUE7kFq3epVPE3BIMyjv+6Ne/6hYDKuPLJ15gOaBVAGue9It3y55qmqtqb:CKUGkwufkyjvTer3dHagGueuNuqtqoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717187059, "uuid": "ca4885e9-fbc2-4551-81e2-9d34127057ce", "value": 314368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187059, "uuid": "4ce74052-80fb-4b64-b68c-7e0d9aed44dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5993e3c-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717187977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187977, "uuid": "990362a7-315b-4d28-805f-5c75f621b0ad", "comment": "Malware payload (GCleaner)", "value": "a513f4669dc9983829bf95bbfc7990ab", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187977, "uuid": "dad29b6a-4f01-48af-b7c6-832ea402eb22", "comment": "Malware payload (GCleaner)", "value": "c2eac3974f83b39ff4103b8291fe0af7725d7f9231cf3951a636423a225ef3af", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187977, "uuid": "adfa8963-19c1-4126-be85-916cadb8480a", "value": "T130742903A2E03D12DF2D8B728F1EC6E8771EB9505E69376D211AAA1F07B20B5C11B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187977, "uuid": "a7798828-e738-4c37-a65e-3e1a727a6644", "value": "0edd493b1e348e6b8a632819c539bc9f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187977, "uuid": "e5a8325d-c8ca-4727-a374-a96a4c8a092b", "value": "3072:8FILy3oMEM3QnzH2So8OhsI4N4LDH763D6zxlr5KHPX1/IlKE:8yL4oMzQj2PFhs3Svu2zxl8LE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717187977, "uuid": "e6d24aa5-1d66-43cb-aa25-b4ab7e93635f", "value": 362496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187977, "uuid": "452f908b-ae17-498e-94f7-0c6e74eff50c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c2c1183-1f90-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717188901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188901, "uuid": "7102539a-d80a-468c-9147-f7e996ffd920", "comment": "Malware payload (Stealc)", "value": "0a1857343ebdb2c191d872e444fad837", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188901, "uuid": "bd5d19dc-4175-4008-a3a0-32b0cc78d764", "comment": "Malware payload (Stealc)", "value": "d015aabe92f1a3208a3e0b6ebaf85a3def932a24fb133bb7c051dc3768af4810", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188901, "uuid": "5c123c36-8dd5-448e-b310-224b1498f787", "value": "T173443AC256E17843EF268B729E1EC6A8661EBC51AF7D62AD23047A1F04B31E1C15F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188901, "uuid": "a27c06a0-1cf1-4aaa-9b14-121761422d30", "value": "526038ac6fb5d9e3d70d196c15c47175", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188901, "uuid": "91bde973-322b-49b4-af02-5f09388d8fa2", "value": "3072:WPdL6Xit6oa0QyUOtowQauVw8MhvcM4CT5AqUQZ5XH3A7H3A4/IVE:CdL6Xi0/0loI78MhkM5yqUQ73Az3AHE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717188901, "uuid": "a5c71302-f163-4942-a4d4-8aeb34317486", "value": 260608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188901, "uuid": "ccc7cca5-47cd-4b57-a4ea-f6c6fdddff8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11faeaeb-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1717189340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189340, "uuid": "ab05abe8-7a78-4be5-bc50-db5ee43f31b1", "comment": "Malware payload (GCleaner)", "value": "cd6edb47a039bfed4715a25297028da1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189340, "uuid": "29233121-4a5e-4d50-be2b-150e5eb244c1", "comment": "Malware payload (GCleaner)", "value": "b51d275f4e094dae577f80f246273c47bd9bcd492d820048983eb92c082ad6ee", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189340, "uuid": "21e9d0cd-de3d-41ba-8f91-7e7a797ea750", "value": "T1B964D60372E03D42EF2E8B729F1E86E8371DB950DE693769211AAA1F07B2171D11B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189340, "uuid": "c0b3dc4a-ab4e-41ba-8175-cd8654a41171", "value": "526038ac6fb5d9e3d70d196c15c47175", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189340, "uuid": "4dcd5432-b4c4-4872-ac20-e7928b837306", "value": "3072:/cngvLCI5+PMn+0xCfiGBfwCkf+PbUqRZ+qQ1cprXptDzye5Lc/IlE:0gvLCW+PMn+FiGwEUqR71LpByy7E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717189340, "uuid": "fca8483f-ef3f-44fd-9f3d-b7643be82214", "value": 313856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189340, "uuid": "f22bba7b-dc7a-4d0b-a3ae-92e5135e4373", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c20be07-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717189974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189974, "uuid": "a8559803-90e8-4495-8995-aa01b836fddb", "comment": "Malware payload (Socks5Systemz)", "value": "95cdd4acc94a2a915f3cff3e07aa9491", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189974, "uuid": "94f63ca2-29e1-445c-bde0-fed68298743c", "comment": "Malware payload (Socks5Systemz)", "value": "d19259f947fa51897af848841af56cac8195b66d1c23db23347936248a5071c8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189974, "uuid": "b16c3bcf-802a-45e0-86f2-1f7beac00972", "value": "T1EB36330BD4AA4071E9D1CC72D9BAC4CA25B63F8B587F3700E264C7EA87B71925AD37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189974, "uuid": "b809c915-1466-4582-bb49-e2720242ebe6", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189974, "uuid": "ed24e6ab-b1a2-457b-aa78-098aa58853e5", "value": "98304:mzraY+eARtaMWM0Q2wqzQ+7VK42UqtjC76b5uBwWI2Jmt0K0RIV5N:WvzA3hWQ2w6B/2rtjXbctg0KQ6N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717189974, "uuid": "3592e3b0-dc21-4966-a087-f7a6c5750c3b", "value": 5012462, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189974, "uuid": "9eaf335e-4437-4961-ab97-f3fbbb18ed0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bebeb7b-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717191128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191128, "uuid": "749af084-a5a4-441e-ae03-4a09c3560cca", "comment": "Malware payload", "value": "b70e66520c92d2385c61d612bb45937e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191128, "uuid": "653bd303-20e3-42a4-9933-91905ec78166", "comment": "Malware payload", "value": "5a145443d06bc42c249f1cfee435f301bb7631218acf1543d84f76de0354249c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191128, "uuid": "e6308447-2ec2-49d5-876b-fbceec69bc93", "value": "T106B5330FDC4BC9F7C8614A33C80A8422ADB41FE54EAEACB5799D5A6D039F7418112E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191128, "uuid": "c0c8c098-2415-4247-89da-1a16179729aa", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191128, "uuid": "43e317b4-736c-4a57-a44f-e379f10f27d5", "value": "49152:lI8wBb1ldfE3Mn6uOthiVkANwNaDJLB5RTHOZVQhTMf:lI8GPdOMn6dthKwOJnR7W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717191128, "uuid": "d863b80e-9818-4d2b-a0bf-16c902fea44d", "value": 2438144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191128, "uuid": "fa3386f9-620f-431b-a14a-85219e8e6fcf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a58027-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717191487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191487, "uuid": "71c56bca-bd8d-483c-8639-2ce7fcdbc702", "comment": "Malware payload (Amadey)", "value": "5c6614c5f883b5d02a45f9054039ca85", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191487, "uuid": "8e1e4382-940f-419b-8282-c03cd8e131ec", "comment": "Malware payload (Amadey)", "value": "a47ce256d30d7d3ada6331befe2896fc7442c1ef8dd663fb9387908ba81c29da", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191487, "uuid": "29987ecd-8eb9-4d2b-9233-cf34afca056e", "value": "T18B95332B6C93BC50DDB651BFF295328BBFFCA870813595EA5E5A8668187180F0C1CE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191487, "uuid": "09730e16-3b56-4220-9c96-6095ebb68b65", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191487, "uuid": "41c1eea9-fe57-435c-8a71-91a38673bef1", "value": "24576:3EJ/1HCFY4mKtLoBD36vwxuwLdvsCbZqOFzs6C9fFjV8IU7Cz+3zELllmRcVvtXB:3wC2Jfl6vwxdJQkE9J9UmtRjX5itsb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717191487, "uuid": "8eb294c3-50bf-4269-8ccc-f486f2b6404b", "value": 1882112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191487, "uuid": "1cefabbf-3f61-4c4e-a520-b62542e24404", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "592860db-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717191607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191607, "uuid": "b2efbe9f-a900-45a1-b2f9-34b1f3170370", "comment": "Malware payload", "value": "095ffff0146f1bc97831eba6a786afe3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191607, "uuid": "6fb17f46-6d57-4985-bc10-7ceaf40a580e", "comment": "Malware payload", "value": "4afa87621022333f7adc460d2aca56be8fd43510d65ac25c02952702f3a46a90", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191607, "uuid": "0d36d7a1-ae26-4ffb-94dd-7443c9fe44db", "value": "T1A5159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191607, "uuid": "41b95253-1dcd-465b-9bb7-7dff42572491", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191607, "uuid": "16eea95d-5fd9-43b5-b921-86e668b8f1ab", "value": "12288:CqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tz:CqDEvCTbMWu7rQYlBQcBiT6rprG8aAz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717191607, "uuid": "1617f716-d2ed-4d0f-970e-8abc787a6ae4", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191607, "uuid": "65417560-8d55-43a3-86c4-0962b87bc8f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce3f55c5-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717191803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191803, "uuid": "9964b8e5-42fe-46e5-ae1d-9e3b8fbe84dd", "comment": "Malware payload (RiseProStealer)", "value": "ef5c796a200e5c826222d9d349fd7676", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191803, "uuid": "3c80fb78-5cec-4b90-b162-3d93a38bf344", "comment": "Malware payload (RiseProStealer)", "value": "696f160c21f0a87305ddc1b8fdad22d4f7bbd5afb02c6624d87b3357277d5f1b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191803, "uuid": "88bbc700-b89e-4f08-bd6a-cb8c708ad8c9", "value": "T168B533B2EF297DB1EAEC0473D4C2906423ED36016E16DF27730FB9525A2B566E3521", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191803, "uuid": "70d9f9de-2e74-43b0-b1f6-c421abbe7d07", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191803, "uuid": "fc67708c-68a1-48f9-be99-395f821a29e6", "value": "49152:lkmKhyq24kI3qebVaP4D4jN11bTKMQvG6kBowaIvKzs3grWwxKG9OxT:lkmKEqlkAbkG4T1qMQu6kiwlyjWL0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717191803, "uuid": "78fd4ff5-f602-42c6-a33e-dca2f0934b05", "value": 2416128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191803, "uuid": "9f8f32f6-c68d-4ec3-b945-a2be64471d29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c32bad3-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717191907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191907, "uuid": "4ecdd145-93a4-43a1-af58-878d73839512", "comment": "Malware payload", "value": "5e83253f24981140251e02aed33120fd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191907, "uuid": "4ef39b39-38cf-43d0-8591-261818d36376", "comment": "Malware payload", "value": "2eb0047f3ca3fe256435565d74d4c3d2df98ef20dcf52793da1af483cd0ad5fb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191907, "uuid": "d41036e2-568f-4fd7-b694-c18e17d4d387", "value": "T14245BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191907, "uuid": "8c16c266-2519-45a7-b1e8-b6bb92cfd66d", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191907, "uuid": "b279822d-7b6e-4dac-9fcd-de0e20c27a45", "value": "24576:nqDEvCTbMWu7rQYlBQcBiT6rprG8au72+b+HdiJUX:nTvC/MTQYxsWR7au72+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717191907, "uuid": "7457b9fe-f20b-49ed-87ee-dc2c00b1b161", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191907, "uuid": "08df3ceb-1404-45f3-b0e2-b1db32a15232", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "801f98cf-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717192102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192102, "uuid": "7546be91-a175-4be2-ba17-b0630acf9339", "comment": "Malware payload (Amadey)", "value": "e38381d97120484d6222043615517eb3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192102, "uuid": "163f3715-048c-4871-b205-f31180295fef", "comment": "Malware payload (Amadey)", "value": "1ea19d27a96fde8c92fade71c70d3c7dcb9a75d070d6d400d6eda8c2a5a6babe", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192102, "uuid": "704440e7-bfdc-4638-aa34-1eae530c21a6", "value": "T1419533A3D8BBE798D06CE7B68D0EA91935750EC3AD7C9E7CC18D69142863E4AC7D03", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192102, "uuid": "8bb69d82-387c-4239-9adc-2501c1d85334", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192102, "uuid": "6de84a31-4df8-4b1a-bc6c-3eae5ddd5974", "value": "49152:d6onU5th2AXmf1j1Uul5t0rdgwYMylIHBLkQ0f:Y5qAXmfQQ5iOwdyqHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717192102, "uuid": "dfd499d7-dfb4-4d89-a269-0d06447f0c98", "value": 1946112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192102, "uuid": "95a22ed7-64ee-4ef6-affc-4695d88c0f2f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b43cb58-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717192147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192147, "uuid": "1ce69e3a-4532-4835-a25a-284a2482ddd5", "comment": "Malware payload", "value": "8cedab31835444bd935f92a91f0afe39", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192147, "uuid": "cfaec350-349a-4df5-afcc-c8e00900619d", "comment": "Malware payload", "value": "fe1a79a56bb4eccb5636bf1e0c016d45375781894846136eeeca828b444c8a23", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192147, "uuid": "956e6ea1-9cf6-4dce-901b-ab464c139b70", "value": "T1B516E0A8F453587B3F835147CD3C6A885851B5A29A023B126EC47C9FFAC65FFC1CA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192147, "uuid": "1778cb70-5f69-44c1-83a9-b301e6f76dfc", "value": "98304:y+zGYsT03Z2BkX0IAEusvRM+eW0myPJvFFZE:2LT03Uk9AEuE0PJtE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717192147, "uuid": "6cbc00c3-9f04-4a0d-a0b4-b4fa504eec57", "value": 4098052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192147, "uuid": "ed1a3e21-4891-4710-a0b4-84f711be4fb9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e24828f4-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1717193984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193984, "uuid": "17974ab5-7ffc-4b27-9c5a-b0d109225b89", "comment": "Malware payload (Adware.Neoreklami)", "value": "0a8ee7c13916478d2edb3d61e8b13a47", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193984, "uuid": "cdf95536-6711-4185-90ac-f1f54907b49c", "comment": "Malware payload (Adware.Neoreklami)", "value": "0640a31da4129d577b61d29018e9077a32768f4a34bc90e866e7c82c891fde5d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193984, "uuid": "fd76e5f7-50a4-46ed-b684-2bc006116b15", "value": "T19C7633A17BF5EB33C8560A3041642EF5F3E9EE805453442BB3C58D9A0E7F641C2B9A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193984, "uuid": "375219be-947c-423a-91c5-d219225cfddb", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193984, "uuid": "22d470d2-4afa-4fea-8dde-abf7423d48fe", "value": "196608:91OMUWQ4JbXWf4z7vpz5XQURHMBnS6GeMaWqALbBK5Lf:3OMBbmAz7N5ZRsBnpM4A/BK5Lf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717193984, "uuid": "56528469-85d3-4036-b0ec-c610384f45bd", "value": 7628857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193984, "uuid": "25ea8fb1-28f6-4a8e-81f5-48ce0b2177a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a89febd-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717194938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194938, "uuid": "6504b994-eb35-4a2d-8214-a363bad6526a", "comment": "Malware payload (Amadey)", "value": "d90dc86c07c652736ef253bda10ebdb7", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194938, "uuid": "d61fd6fe-a532-4820-b652-120ed851615d", "comment": "Malware payload (Amadey)", "value": "c4579c723a1dc34b48b4684b6d05e1902ac28d007efcb3d96958a92ed963a94f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194938, "uuid": "cb15e815-4489-46ff-ae6e-976bbf4679f9", "value": "T1D48533601F2A3B7DD96C0871CE32DF4C70F80C8A05BBE1555B9188D61AF3AFA6B941", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194938, "uuid": "be16adb2-f8f7-49d9-b5da-fc278cd882c8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194938, "uuid": "1df6080a-8c00-425e-a759-c0c49d9eebcc", "value": "49152:QPlMGxzd7loa9wnz25tRb4zDbPIY3RjtIspMYGzL:QPlMIoa9az2tb4zwYBj6Ye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717194938, "uuid": "3046566b-eef1-41b9-81e2-e78839179004", "value": 1873920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194938, "uuid": "23f1512d-a96f-43c3-a5c0-71f161db629d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2cfd4e2-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717195166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195166, "uuid": "9ff5bc59-a91b-4693-9e72-828d7ffedb80", "comment": "Malware payload (Stealc)", "value": "5098215db0639c370b8659f1bace0f52", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195166, "uuid": "20d6378e-ef9b-45c3-afe8-d40e44c84c98", "comment": "Malware payload (Stealc)", "value": "c01796a3eae24280d94277bcdd2bb1dc84623a0021d5259a512b949bbcc9a295", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195166, "uuid": "ca52bd1e-bf65-4db9-a735-4654ce54ebae", "value": "T11BB5AD36B1908777F0731D3C8CBE639949267F201E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195166, "uuid": "fb533086-d094-476d-8b8f-b762a478f3da", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195166, "uuid": "06bbe297-9f18-4562-bf77-f50ff4f3f6e6", "value": "49152:wQc81KnB/a/hNT/dlYa8aesY3Ot4N7G/:wDta/hNT/dln0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717195166, "uuid": "9b91b9df-61e6-43e5-8e59-20500c2ed791", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195166, "uuid": "9b6e10fd-0d1f-4f65-8c69-41f117c6be85", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36bb566b-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717195415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195415, "uuid": "0e23abd6-829a-4384-b5b1-550238855dc7", "comment": "Malware payload", "value": "dc6255999f7bff4fda5b0b98e866848d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195415, "uuid": "4a1d4215-4fcf-487b-8b0f-c5266f41ccb5", "comment": "Malware payload", "value": "4b169a7a2acd321038daf3a2bf1d662ef6dfe96c4c3c7357cd5dccbe03c597bd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195415, "uuid": "9f65eb46-72ab-49eb-a462-b702add90941", "value": "T1B2B533B02C9F7114FE1A973618E3E7832D560C1A355FAA04CA8C267F44EBD55DEF26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195415, "uuid": "8c9bc530-974a-4e7a-a041-8312ef9b75bb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195415, "uuid": "eee9beb3-365c-4ff0-b45f-3bd795b90d45", "value": "49152:G+TdLiGwA1mg7YitsSpC/9BojltuXbrCU:G+TdeGwu7pjC/6uL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717195415, "uuid": "b8ed79c2-f7a5-4344-b20c-8d6851b19a51", "value": 2404864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195415, "uuid": "ad402fbf-0361-4721-a8ad-2f3ecd5fb51e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b7374fa-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717195825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195825, "uuid": "f89ec612-8e4e-4822-80b2-3ab813a5c492", "comment": "Malware payload", "value": "b791156639ee0e5da589a7963fa54cde", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195825, "uuid": "e2162680-ab66-428a-b584-e7ffc0004e31", "comment": "Malware payload", "value": "30b6a846cb3193e85d61dc117463ec4137a04c2fcf2b5b6bf4511a4c919b8e92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195825, "uuid": "16bd5afd-6822-4852-89fc-39c93893b328", "value": "T1F945BF027391C062FF9B92734F5AF6115BBC69260123E61F13981DBABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195825, "uuid": "00b7982f-863c-4e03-8441-37cc159aad82", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195825, "uuid": "ac7bd27f-50e7-4a66-838e-d04d96d257c9", "value": "24576:NqDEvCTbMWu7rQYlBQcBiT6rprG8auz2+b+HdiJUX:NTvC/MTQYxsWR7auz2+b+HoJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717195825, "uuid": "f179a36d-4d59-4ab5-ad9b-ed9b60ca07f2", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195825, "uuid": "da997f91-dfb7-45fe-afcb-24cd4558eff8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcfe435b-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717196069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196069, "uuid": "a3748b79-75d3-47c6-a34b-d28b21db7c76", "comment": "Malware payload (Stealc)", "value": "e71af8b84bff6a0e4e51a4cc1a163f2e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196069, "uuid": "1de2cbe2-927c-4f38-8244-1894b35603fa", "comment": "Malware payload (Stealc)", "value": "edb50eba01afd5871e7c9f3711a8401032e15e74d15d8a2caa9439a5de7ed962", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196069, "uuid": "86d3aa5e-698c-4e04-a7d4-9842418187e2", "value": "T16654C78362E03D62EF2E47729F1E82E8371DB950DE69776D212A6A1F03B2171C11B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196069, "uuid": "ea968f79-0efc-45e9-bc8b-056cacfcc0e6", "value": "526038ac6fb5d9e3d70d196c15c47175", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196069, "uuid": "dbf14074-d810-4f5f-a9bf-6e59a36b30e0", "value": "3072:V7nLK5LICWu4WT0tyVqGy26l9M5Qo7/IlE:FnLK5LJetCqGcJE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717196069, "uuid": "944fb87f-e5d6-473b-b8a1-60c4894fddd3", "value": 287232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196069, "uuid": "22486be2-2ac3-4787-b165-937693fa117d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14c00dce-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717196217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196217, "uuid": "112f1edd-94ab-45f2-843e-646303f3d0c6", "comment": "Malware payload (Stealc)", "value": "2ca30b8c276e574c48d9d653c761b567", "object_relation": "md5", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196217, "uuid": "2557663d-6b0a-4aee-8c20-1b8f8c28327c", "comment": "Malware payload (Stealc)", "value": "350e167aa67efd82ff9823b3967958d2e9ffd10da3c9764152c527fa9ea8486b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196217, "uuid": "7b0ff6f1-9c64-4e0d-812b-d6d1e09a66ee", "value": "T108B5AD36B1908777F0731D3C8CBE639949267F201E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196217, "uuid": "767ba83f-b6d3-418e-bbb1-bb823adc9dcc", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196217, "uuid": "23b9ff84-1468-4fce-81aa-c6b4d06288ed", "value": "49152:wQc81KnB/a/hNT/dhYa8aesY3Ot4N7G/:wDta/hNT/dhn0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717196217, "uuid": "bf510e3e-8e23-4a49-ad96-b287a15d17ee", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196217, "uuid": "9cd80e76-415d-4c2f-af56-78c7c271f291", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17196a85-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1717196220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196220, "uuid": "8d33ad81-a7dd-4565-a08a-7ba93c743e19", "comment": "Malware payload (Amadey)", "value": "d7c522756914dd764995b304056d70b8", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196220, "uuid": "c09614c7-2f0f-42d9-9279-7a8d18a10509", "comment": "Malware payload (Amadey)", "value": "e8be505a6d67c04d1cfc4d45455f1f8026e80d6838505a271e701c694668ac9f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196220, "uuid": "968d20ab-2951-4a32-a90b-5b8d5b3b2ad6", "value": "T1A99533047E64CB57C3E40DF63035DA97E7D06381900E60601BB9EAE2C4BE396DB5DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196220, "uuid": "944c0b13-8e52-4496-b037-b5b9ea6e0d42", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196220, "uuid": "0291c0f0-e129-471c-8621-575bc415cc65", "value": "49152:xYNOlQL8Q7h4xTt10m2lLn0u2QFr8ER+8/p0MdPIgUp22z:xm8QLen0mqL0urd9+8zqgA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717196220, "uuid": "a174ddb5-8377-4eab-9830-5829cd92ba25", "value": 1882624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196220, "uuid": "0d46cbb8-9289-46dc-8d4a-13357f604c5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72814b4d-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload (RiseProStealer)", "timestamp": 1717196374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196374, "uuid": "1fd64a69-51ca-4054-8204-ec874fa9095b", "comment": "Malware payload (RiseProStealer)", "value": "8959af1134f6a94034f27954bf24bed0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196374, "uuid": "49e39ae0-c038-4fac-9f99-e68c0e6f764c", "comment": "Malware payload (RiseProStealer)", "value": "81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196374, "uuid": "b7d0d8c9-9387-4f6c-beb3-192f00a705a6", "value": "T160B533AB5A0D5EF0C9D8587155C442793AAA708CC9261C3FBB4BB7840E93E9B37B35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196374, "uuid": "4b1f3856-1356-45b5-8035-7671d90581bb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196374, "uuid": "850fec51-0f24-4320-9cf6-f01cb2e72db7", "value": "49152:ikmKhyq24kI3qebVat47Y6+x8kbVb39i86kLYouNcbNkyohz:ikmKEqlkAbkS7Y6MV8kLIa4z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717196374, "uuid": "09cda9d7-64c4-4cc0-82bc-8d14def0fcc2", "value": 2357248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196374, "uuid": "e9d85736-30d7-4595-92ea-3ad62aeff5d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cf54c4c-1fa2-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717196687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196687, "uuid": "e4751963-4d84-4cb7-937b-cdb0e18a62c5", "comment": "Malware payload", "value": "2e64dc6817f558e7f17bcccda875cf59", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196687, "uuid": "75ef2ad5-cfed-426a-8719-1b284c5db9c2", "comment": "Malware payload", "value": "481d83acc9d117a56e816fe0e8b4b68ad7329c83e8e7e4382e5867099bfe616d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196687, "uuid": "81afe477-3edb-4006-ac2b-0f4db55b1240", "value": "T13E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196687, "uuid": "76e34afc-3558-4516-8328-e833c9ba94ce", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196687, "uuid": "77ac5550-8727-4ed5-8609-86b6e4a8d842", "value": "12288:2qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4Tv:2qDEvCTbMWu7rQYlBQcBiT6rprG8aAv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717196687, "uuid": "3711a49f-9707-442f-a7b9-0381348c99b8", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196687, "uuid": "2d020894-45bf-4833-b8cb-0616b1da3182", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "171e0b50-1fa3-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717197079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197079, "uuid": "438eac57-2ba8-4075-a84b-50e9e737223e", "comment": "Malware payload", "value": "a022a79f3eddfaf3b4d318ce0fa1301b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197079, "uuid": "8e37c120-0c4e-4f43-be2c-d34c4686f4af", "comment": "Malware payload", "value": "c7c6eee5b78cd4f8a6b606d472f5b097df9a83f404254a4525b6d83635b0fec7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197079, "uuid": "235572b3-5790-4307-80f2-7a7e8c8bde88", "value": "T1C4844B9362E03C4AEF1D87728F1E86E8371EB9505E69377D211A6A1F03B2271C19E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197079, "uuid": "bb4edc94-6740-4f12-a8a4-00413c9e7ce2", "value": "526038ac6fb5d9e3d70d196c15c47175", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197079, "uuid": "97be9a29-7093-45f8-8f09-ba9f154ab6fd", "value": "6144:xxVLmcg7f0Ba4M8WaEKs9mQsDZfBTJrs/ICE+E:TVqc20+8WtP4QsxfYQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717197079, "uuid": "40d8b099-8f32-41bc-93e0-f6f4c5681c49", "value": 385024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197079, "uuid": "8dd5ab07-12db-4f17-96cb-9e7b6bc74fa4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b841b16e-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1717197779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197779, "uuid": "45676ee4-4380-449f-89ea-8cc566ca59f6", "comment": "Malware payload (Adware.Neoreklami)", "value": "89052e2c020f8f6f5287e10d134f0bd1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197779, "uuid": "997e294a-7ca4-446a-b3d2-a368c5095003", "comment": "Malware payload (Adware.Neoreklami)", "value": "164f70b0cec79bf164f0f98d48881ea213bc102ece7e6cf4fc60f50a775a32a3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197779, "uuid": "366c6578-5e77-4d6b-a0c9-a079b58056b5", "value": "T15376337335FD89BDC6C248746EC83FF9AAF1C1380B51EE976341619E712C691C6632", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197779, "uuid": "898be012-3a1e-44f6-bc74-1849a92b96c9", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197779, "uuid": "5416d5ab-a34f-4fbf-8343-bbe81c16308d", "value": "196608:91O6+t8QqYo3W+/5rfhXte7sTa/E7sA7WZUS1yZoZ7I:3O638oGalLtTqZb1D5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717197779, "uuid": "605008b8-6dd3-48fd-9cff-466220abda52", "value": 7645791, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197779, "uuid": "4b7c944a-a867-48c2-a46b-7164ab281d65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2db1cd28-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1717198835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198835, "uuid": "9390d13b-e06e-4f73-a628-d74e64826871", "comment": "Malware payload (Stealc)", "value": "126a8917cab84f3a636e23b0c5a10f48", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198835, "uuid": "dcaa3904-b578-43aa-bc36-5d7c95036fa9", "comment": "Malware payload (Stealc)", "value": "50cbeb44f0d302b57f9b0235abfce4f5de039789c5c76d2885218385fc0875e5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198835, "uuid": "8cff710e-9366-49be-9b42-d0a26f52d4e6", "value": "T1D3B5AD36B1908777F0731E3C8CBE639949267F101E68B84A7AF55E3C0A3B6512F292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198835, "uuid": "f177b7ca-87ce-4d54-a359-5864a50f191e", "value": "2dc2d7809a7c300f824be1f3c9361f4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198835, "uuid": "97baf7b7-a4da-4352-b812-011474c500e1", "value": "49152:wQc81KnB/a/hNT/dhYa8aesY3Ot4N7G/:wDta/hNT/dhn0etD/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717198835, "uuid": "7a27b024-3ee8-4f91-9119-48dd855601c8", "value": 2478080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198835, "uuid": "a4ca3e43-ece9-4b56-964c-25fc639fb351", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3587915-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1717199060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199060, "uuid": "01bb577d-86a7-4dce-9e6c-4b56fc22338b", "comment": "Malware payload (Socks5Systemz)", "value": "e2aada8d8b113caf1867f6eb21052e1b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199060, "uuid": "b86773e4-c2bc-4c8f-bd36-5425e1f897b1", "comment": "Malware payload (Socks5Systemz)", "value": "43c30d6b20b3ebe83255f1302098d9da263472584c95141d09dc18e12a271e58", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199060, "uuid": "2ec683f8-721f-4866-924a-6e58b10b8afb", "value": "T13D3633A3F39850BBDD26D9BE6423E46D6F676854497E1404B10F538A4B322CDC372B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199060, "uuid": "a77b7bba-5102-44dc-b104-765e609a80dc", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199060, "uuid": "1e7569df-dd19-4a99-9ef2-dc51b247966e", "value": "98304:mLEKis53Ohq3sckkz84wYBnY1G+n7Cn8waqMplWVwJdruCYrUuhrTN:mUUehmsc58G5YOnLaqElnPruCY4E3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717199060, "uuid": "62a59d44-3e79-46a9-a085-013df6330ab6", "value": 5142645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199060, "uuid": "ed4e648d-3c57-471d-b9ed-9480de3c0669", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b554c3e-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1717199851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199851, "uuid": "c1585f4f-aab5-46d1-943c-116b8f882898", "comment": "Malware payload", "value": "78a8c9796fbf3c2089a0454db657c396", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199851, "uuid": "0559f70f-8bf1-4438-b677-65b49f1b1314", "comment": "Malware payload", "value": "6f647af273564a7d77c4878bd455296c67fb72a49ecc040b6669385767b3c9de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199851, "uuid": "0e89eda7-1253-4476-962e-3b1d13c99e50", "value": "T1B5159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199851, "uuid": "b0cc8780-8c02-42f9-9bfb-4dbbfec9a7c9", "value": "948cc502fe9226992dce9417f952fce3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199851, "uuid": "64f60048-89d7-4b1d-b873-1cc32343ff6c", "value": "12288:1qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga4TC:1qDEvCTbMWu7rQYlBQcBiT6rprG8aAC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1717199851, "uuid": "8c0a08cb-589e-45ae-ac35-efc4e97b966d", "value": 915968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199851, "uuid": "dd42bc25-ea01-4baa-aa2f-32859b199d83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113728, "uuid": "057fb09f-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.43.6:53300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113792, "uuid": "2c27eca1-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.32.215:60231/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113814, "uuid": "39501d08-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.206.134:60874/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113851, "uuid": "4eea395b-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.182:58307/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113859, "uuid": "539ea690-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.35.176:50000/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113864, "uuid": "56d1f28e-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.198.9:52323/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717113982, "uuid": "9d1b3326-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.71.136:41482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114146, "uuid": "feb1db9b-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.86.31:59338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114148, "uuid": "006527e9-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.231.79:43185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114149, "uuid": "00807b26-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.59.75:35718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114387, "uuid": "8e463a8f-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.23.103:40726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114392, "uuid": "9166f840-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.60.91:55776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114445, "uuid": "b12b5768-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.11.189:49432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114747, "uuid": "652dd375-1ee3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.34.229:46615/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114926, "uuid": "cfef1fb5-1ee3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.93.139.76:32884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114926, "uuid": "d0023d73-1ee3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.227.86:59792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717114927, "uuid": "d039ff69-1ee3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.19:37266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115291, "uuid": "a95ec223-1ee4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.79:48433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115298, "uuid": "ad773c5e-1ee4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.206.18:51237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115473, "uuid": "16182f0e-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.44.56:37097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115474, "uuid": "1646240f-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.51:60284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115554, "uuid": "4615012e-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.75:49337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115654, "uuid": "8192c5a0-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.56.238:40234/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115654, "uuid": "81df674f-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.187:54907/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115714, "uuid": "a586e6c3-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.26.143.165:51443/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115770, "uuid": "c6d8d52d-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.71.136:41482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115828, "uuid": "e957551d-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.231.79:43185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717115946, "uuid": "2ffcd4ab-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.205:55335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116037, "uuid": "6616c5b0-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.60.91:55776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116134, "uuid": "a01ba1bc-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.51.42:53049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116190, "uuid": "c148876a-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.33.86:59616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116546, "uuid": "95a4ab9e-1ee7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.120.9:54315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116570, "uuid": "a3ce2be4-1ee7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.195.170:51346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116786, "uuid": "2479d74c-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.19:37266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116861, "uuid": "50efef60-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.206.18:51237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717116873, "uuid": "586cf1e3-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.112:51973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117086, "uuid": "d7735b0a-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.75:49337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117089, "uuid": "d8f01418-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.51:60284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117146, "uuid": "fb0701df-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.194:39683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117269, "uuid": "443f25e9-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.140:34878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117387, "uuid": "8a9c6a0c-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.4.46:59280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117397, "uuid": "90966878-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.76.53:59426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117400, "uuid": "9288a01f-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.6.109:47595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117447, "uuid": "ae52e04c-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.118.244:39305/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117538, "uuid": "e4954684-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.112.114:38367/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117687, "uuid": "3d7ab5d3-1eea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.151.45:60775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117830, "uuid": "92ff083c-1eea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.185:57625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717117867, "uuid": "a8fa2183-1eea-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.33.86:59616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118110, "uuid": "39d3b0eb-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.120.9:54315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118227, "uuid": "7f7ced2a-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.195.170:51346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118348, "uuid": "c7710959-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.163.243:51627/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118422, "uuid": "f3a33101-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.106:55934/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118526, "uuid": "318297ab-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.194:39683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118767, "uuid": "c1785412-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.132:51078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118779, "uuid": "c886059a-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.65.29:41967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118828, "uuid": "e59cbcf4-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.154:48717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118888, "uuid": "09765fc5-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.72:56621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118888, "uuid": "098b5d26-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.186.185:50337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717118947, "uuid": "2c4527ad-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.140:34878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119024, "uuid": "5a866287-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.4.46:59280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119193, "uuid": "bf0fdc6a-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.246/bins/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119193, "uuid": "bf116c90-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.246/bins/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119250, "uuid": "e0fa3166-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.214.81.231:39811/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119251, "uuid": "e1e4b503-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.76.53:59426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119311, "uuid": "05c64a4e-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.132:51078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119312, "uuid": "06161e5a-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.185:57625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119327, "uuid": "0ee21447-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.28.45:45063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119372, "uuid": "29e43580-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.22.11:45069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119398, "uuid": "391c3705-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.6.109:47595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119429, "uuid": "4bb9600a-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.101.89.131:14822/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119789, "uuid": "22475247-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.4.199:58666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119910, "uuid": "6a64d61a-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.249:32800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717119912, "uuid": "6bfe5048-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://xdje.sticky.oystergardening.name/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120151, "uuid": "fa346d46-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.200.70:52925/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120160, "uuid": "ff9ac1a1-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.205.27:34573/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120574, "uuid": "f6532963-1ef0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.150.8:34994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120867, "uuid": "a4f6f94e-1ef1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.138.255.158:50673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120869, "uuid": "a61f874f-1ef1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.13:42211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717120870, "uuid": "a70572a9-1ef1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.39.186:42557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121048, "uuid": "10d0ac8d-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.105.5:38211/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121051, "uuid": "12cf6a9c-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.19.86:49285/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121226, "uuid": "7b32c97e-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.165:56445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121286, "uuid": "9ee99d7a-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.249:32800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121346, "uuid": "c23815f0-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.202.247:38418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121409, "uuid": "e8380daf-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.229:40219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121470, "uuid": "0c3f371d-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.94.8:45168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121590, "uuid": "54135458-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.65.190:32999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121712, "uuid": "9c79ab4f-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.80.2:41962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121712, "uuid": "9cd953d1-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.124:35899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121718, "uuid": "a01e0372-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://orlandovargas.pro/%40DDRI_0.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717121947, "uuid": "2875e04f-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.246.2:60277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122070, "uuid": "722acdf1-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.92.221:35439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122389, "uuid": "30371baa-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.239.212:44787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122427, "uuid": "46fa3048-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.46.14:40684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122488, "uuid": "6ae577ef-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.38.13:42211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122672, "uuid": "d90aab9f-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.165:56445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122849, "uuid": "428143ab-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.246.2:60277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122851, "uuid": "43a76775-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.96.254:37983/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122853, "uuid": "448c9984-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.42.36:55759/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717122867, "uuid": "4d41afd5-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.99:41066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123149, "uuid": "f5268867-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.198.20:51232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123280, "uuid": "432ab8f8-1ef7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.193:32980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123326, "uuid": "5e740f08-1ef7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.124:35899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123357, "uuid": "70fa9f50-1ef7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.91.40:58384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123748, "uuid": "5a64714c-1ef8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.48.10:33295/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717123760, "uuid": "610fbee9-1ef8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.243.2:33393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124166, "uuid": "537cfe0c-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.239.212:44787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124183, "uuid": "5d32a3a6-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.190.248:35661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124227, "uuid": "77a459d8-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.170.160:40966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124346, "uuid": "beac1858-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.206.48:33187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124469, "uuid": "07d832c2-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.242.185:56971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124476, "uuid": "0c060085-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.71:43097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124528, "uuid": "2b0212ec-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.2.19:43953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124539, "uuid": "31cf6f49-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.92.216:49108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124585, "uuid": "4d09f223-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.34:52550/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124595, "uuid": "52c321ba-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.229:48905/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124614, "uuid": "5e70391b-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.6.204:55295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124620, "uuid": "6212a4ef-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.74.226.119:43927/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124757, "uuid": "b3cf89fd-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.146.249:40573/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124766, "uuid": "b8e93cbc-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.223.21.3:35591/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124767, "uuid": "b96f7708-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.82.231:58163/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124767, "uuid": "b98cf84d-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.90:36724/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124768, "uuid": "ba020e3c-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.174.173.54:54145/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124770, "uuid": "bb3d28fb-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.221.114:58221/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124770, "uuid": "bb7c4579-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.198.20:51232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124775, "uuid": "be3cb519-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.205.124:37043/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124827, "uuid": "dd0e07c0-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sheksweet/sheksweet1/main/RambledMime.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717124895, "uuid": "05b774f2-1efb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.91.40:58384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125013, "uuid": "4c117a59-1efb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.193:32980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125127, "uuid": "90552e5c-1efb-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.164.115.233:52139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125548, "uuid": "8b4fb472-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.233.218:36157/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125554, "uuid": "8e8cf532-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.7.197.202:49587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125610, "uuid": "b02491ae-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.170.160:40966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125668, "uuid": "d2bfdf1e-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.144.208:47631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717125673, "uuid": "d5444885-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.201.66:34006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126087, "uuid": "cc8094f4-1efd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.199.236:49139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126147, "uuid": "efe14258-1efd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.206.48:33187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126159, "uuid": "f72cf2dd-1efd-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.93.154:50133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126291, "uuid": "4625cad1-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.203.205:41584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126333, "uuid": "5eb27308-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.71:43097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126452, "uuid": "a614dd7b-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.17.203:40669/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126574, "uuid": "eeb83706-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.101:57160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126639, "uuid": "1550d2e1-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.15.150:34979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126699, "uuid": "390b7bf3-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.58:55072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126824, "uuid": "835ccc35-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.78.9:35587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717126986, "uuid": "e3e6ff2e-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.33.134:47963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127047, "uuid": "08909f77-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.193.179:33748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127289, "uuid": "9908fbf6-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.19.111:47740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127346, "uuid": "bad157fd-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.246.182.36:49864/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127348, "uuid": "bbd987a8-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.167.9:41789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127348, "uuid": "bc0229a2-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.3.114:45496/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127353, "uuid": "bef62c47-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.14:56782/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127415, "uuid": "e3c4e5d3-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.206.32:52984/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717127902, "uuid": "05ea94ce-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.94.12:59888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128010, "uuid": "467f86bc-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.191.233:42817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128011, "uuid": "46f8b2c6-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.141:41198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128068, "uuid": "68dcc154-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.101:57160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128071, "uuid": "6aba95a5-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.78.9:35587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c0cdc5f-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c0e440a-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c1d81f5-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c265c86-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c553179-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c727f37-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128127, "uuid": "8c7bc8d8-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "8c89d9f7-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.199.236:49139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "8c9ade0d-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128128, "uuid": "8c9ae244-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.107/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128245, "uuid": "d2d51e73-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.249:32800/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128249, "uuid": "d51e1973-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.192.170:42878/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128367, "uuid": "1b4ca98c-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.58:55072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128486, "uuid": "624cb7a0-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.171.187:32828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128610, "uuid": "ac1a5ef8-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.201.66:34006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128667, "uuid": "cddb7fc2-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.198.199:43639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128703, "uuid": "e352b3d3-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.88.83:33351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717128845, "uuid": "3866821b-1f04-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.33.134:47963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129208, "uuid": "10c66d33-1f05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.191.233:42817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129386, "uuid": "7a936be1-1f05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.161.94:52654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129446, "uuid": "9e4949f0-1f05-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.94.12:59888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129626, "uuid": "09a3b309-1f06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.101:37357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129689, "uuid": "2f854644-1f06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.171.187:32828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129745, "uuid": "50c5eb69-1f06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.141:41198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717129813, "uuid": "795c5d0d-1f06-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.164:48251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130048, "uuid": "0545ad05-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.117.106:37883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130049, "uuid": "0617316b-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.133.253:47381/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130123, "uuid": "31ec5231-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.197.115:46517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130408, "uuid": "dbbdbb42-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.170:51044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130408, "uuid": "dbd0aa33-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.92.84:50525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130409, "uuid": "dc3eda91-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.210.41:34901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130413, "uuid": "de991640-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.211.157:57660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130479, "uuid": "05f44362-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.249.211:47245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130542, "uuid": "2ba8bdb0-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.246:38112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130586, "uuid": "45f58d5d-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.38.33:44823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130784, "uuid": "bbd163cf-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.223.206:57659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717130945, "uuid": "1c06c684-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.101:37357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131008, "uuid": "41a39189-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.161.94:52654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131127, "uuid": "883393d9-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.132.219:47806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131186, "uuid": "ab4094e4-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.144:53347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131311, "uuid": "f5d84bf9-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.19.79:39385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131485, "uuid": "5df125e3-1f0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.164:48251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131547, "uuid": "8283592d-1f0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.197.115:46517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131734, "uuid": "f24f8b5e-1f0a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.42:57382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717131936, "uuid": "6a7d1091-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.246:38112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132145, "uuid": "e7563c30-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.146:39339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132162, "uuid": "f111880a-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.69.72:33768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132211, "uuid": "0e3bd5dc-1f0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.192.168:38472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132211, "uuid": "0e4289ed-1f0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.249.211:47245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132512, "uuid": "c1d58151-1f0c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.248:54125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132627, "uuid": "063090a6-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.248.99:52346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132639, "uuid": "0ddea1e4-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.58.194:59023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132867, "uuid": "95a997eb-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.47.70/lend/victor.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717132936, "uuid": "be64704b-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.1:39559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133047, "uuid": "00b268cb-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.144:53347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133047, "uuid": "01017d4d-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.45.165:46368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133226, "uuid": "6ba8da39-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.190:60475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133238, "uuid": "7288f68e-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.102:42753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133346, "uuid": "b32ff573-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.70.164:59166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133418, "uuid": "ddb590f9-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.221.231:45027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133472, "uuid": "fe4e22e7-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.239.48:37175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133530, "uuid": "20c6a115-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.84.61.165:41037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133601, "uuid": "4ad92755-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.237.47:53017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133649, "uuid": "67813b34-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.44.148:55136/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133660, "uuid": "6e2b37c1-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.180.63:58521/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133738, "uuid": "9cdffd79-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.69.72:33768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133766, "uuid": "ad678ef2-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.248:54125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133827, "uuid": "d1d92551-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.198.77:34036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717133886, "uuid": "f4b83ef6-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.102:42753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134015, "uuid": "41ae1813-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.70.205:40648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134068, "uuid": "612af80e-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.47.200:44437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134126, "uuid": "83b83a50-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.241.99:53372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134126, "uuid": "83f08c4e-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.216.195:48453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134248, "uuid": "ccb4f71c-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.219.208:45061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134486, "uuid": "5a6d9329-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.91.58:54080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134546, "uuid": "7e425374-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.205.122:45061/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134546, "uuid": "7e52860d-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.149.167:53646/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134609, "uuid": "a3ba654a-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.70.164:59166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134620, "uuid": "aa618265-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.150:33237/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134667, "uuid": "c6312f27-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.9.225:37035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717134687, "uuid": "d2582ac9-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.111.167:60388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135034, "uuid": "a128aca2-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.152:50420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135085, "uuid": "bf70246a-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.84.61.165:41037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135085, "uuid": "bfd277c5-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.108.97:57147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135086, "uuid": "c03a8c12-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.172.171.201:44377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135146, "uuid": "e41ef557-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.156.182:44760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135146, "uuid": "e42be215-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.237.47:53017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135370, "uuid": "69b39c42-1f13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.197.132:37478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135446, "uuid": "96d1eb79-1f13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.22.248:52503/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135464, "uuid": "a168ce26-1f13-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.198.32:54874/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135687, "uuid": "2642c585-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.241.99:53372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135927, "uuid": "b5690053-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.156.182:44760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135927, "uuid": "b5a212e3-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.89.150:52271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717135929, "uuid": "b6619ae2-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.96.254:37983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136120, "uuid": "287c5b83-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.129:37881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136131, "uuid": "2f262bea-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.223.246:48362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136227, "uuid": "684d1837-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.172.171.201:44377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136360, "uuid": "b76be4e0-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.41.83:54344/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136371, "uuid": "be1a05fc-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.47.201:55962/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136378, "uuid": "c1f7f0f4-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.135:57800/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136411, "uuid": "d5e3a46c-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.59.80:43759/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136588, "uuid": "3f6a4d1f-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.96.254:37983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136647, "uuid": "626cecdf-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.91.89.150:52271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136648, "uuid": "6314ba91-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.163.116:53362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136710, "uuid": "884f4382-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.0:53574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "ac56f891-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.25.19:8888/zRunWxPlug.bat", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136771, "uuid": "acc2309a-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.73.125.6/Application.jar", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "acc57bc8-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.185.166.118/sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "acc5eedd-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.73.125.6/s.ps1", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "acc772a5-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.73.125.6/ld_.zip", "Tag": [ { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136772, "uuid": "acf7e421-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.25.19:8888/WxWorkMultiOpen.exe", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136773, "uuid": "ad7e94b7-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.73.125.6/MSiedge.exe", "Tag": [ { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136777, "uuid": "afc513f5-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.116.24.86/RansomV4-2.exe", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136777, "uuid": "afc5b18e-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.116.24.86/RansomV4.exe", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136780, "uuid": "b1e43a42-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.64.134:56274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136780, "uuid": "b1f88920-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.91.25.19:8888/WxWorkApis.dll", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717136946, "uuid": "14a0b394-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.108.97:57147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137074, "uuid": "60efebfc-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.164.141:40514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137075, "uuid": "61edf1b4-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.51.174:49191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137253, "uuid": "cb8c2263-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.104.202:35841/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137431, "uuid": "35f2682a-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.191:37412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137486, "uuid": "567c4900-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.166.18:48074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137491, "uuid": "59637c1a-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.48:40170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137552, "uuid": "7e32282d-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.85.222:45176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137670, "uuid": "c411f53c-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.18:37858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137672, "uuid": "c54be213-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.16.229:59680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137763, "uuid": "fb7aa327-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.133.26:43402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137787, "uuid": "09c946f6-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.0.71:54879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717137845, "uuid": "2cc6d719-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.124:60880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138028, "uuid": "996710c1-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/ftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138029, "uuid": "9a67f250-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/openssh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "9ab9523a-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/pftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "9acac960-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/apache2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138030, "uuid": "9b260d37-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/cron", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b45905f-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b5eb9fd-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/ntpd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b6386c1-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/tftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b69ab15-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/[cpu]", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b69dd89-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/wget", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9b8afae1-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/bash", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138031, "uuid": "9ba38e07-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.128/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138148, "uuid": "e1498d6a-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.200.127:47803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138155, "uuid": "e54fb1c3-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.83.41:60286/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138156, "uuid": "e5d52708-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.69.160:53833/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138222, "uuid": "0d246570-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.190.29:58654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138266, "uuid": "279c3999-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.239.48:37175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138272, "uuid": "2b45279b-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.129.93:51067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138340, "uuid": "53b8ecdb-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.207.155:60345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138465, "uuid": "9e0b86fc-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.57.34:33532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138698, "uuid": "28d07f07-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.178.25:39520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138745, "uuid": "44fdb960-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.48:40170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138814, "uuid": "6e15adcd-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.78.103.195/ws8ioUp8Us", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138874, "uuid": "921bc16d-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.164.141:40514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717138875, "uuid": "92a31bd5-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.78.103.195/XdYLSM59XW", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139046, "uuid": "f880d576-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.16.229:59680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139047, "uuid": "f8cae61b-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.159.102:45401/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139066, "uuid": "0481ccc2-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.45.54:33520/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139108, "uuid": "1d7a2d8b-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.207.155:60345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139113, "uuid": "2054c1b3-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.252.218.93:38322/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139168, "uuid": "413f1798-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.18:37858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139183, "uuid": "4a3b0998-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.79.94:52698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139620, "uuid": "4e6e5329-1f1d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.8:50795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139946, "uuid": "11178286-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.129.93:51067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139946, "uuid": "1135afb5-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.116:47828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717139952, "uuid": "1477210a-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.58.113:59140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140075, "uuid": "5defb7ba-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.39.90:43445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140085, "uuid": "639476f6-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.182:47919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140246, "uuid": "c3875d50-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.3.114:45496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140251, "uuid": "c6c7a710-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.233.240:35687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140266, "uuid": "cf943da8-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.28:58521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140310, "uuid": "ea0a759e-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.178.25:39520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140454, "uuid": "3ff96c13-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.198.77:34036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140733, "uuid": "e5c2547d-1f1f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.59.78:39947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140854, "uuid": "2e4882f1-1f20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.202.96:43136/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717140971, "uuid": "7405beba-1f20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.116:47828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141029, "uuid": "966b65b0-1f20-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.22.248:52503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141211, "uuid": "02bc502c-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.28:33048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141273, "uuid": "27c77503-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.87.230:34703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141387, "uuid": "6bcf3b1d-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.170.115:47520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141446, "uuid": "8f33482d-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.73.125.6/application/ld.exe", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141446, "uuid": "8f3e0110-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.56.167:45900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141474, "uuid": "9fea540e-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.100:58394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "b510a9af-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "b53feece-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141510, "uuid": "b54fb4f9-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b58c547f-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b5c6135a-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b5cd255f-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b5e14dc7-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b5e6acc1-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141511, "uuid": "b5f9b4f7-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141512, "uuid": "b62506c9-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.209/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141631, "uuid": "fd53f405-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.114.81:55365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141689, "uuid": "1f8b4b48-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.39.90:43445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141754, "uuid": "4646cb5d-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.186.66.98/ELCHAPO/Synfckpr.dat", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141755, "uuid": "46e49c30-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.186.66.98/ELCHAPO/Vcpirx.vdf", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141756, "uuid": "47776d72-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.186.66.98/ELCHAPO/Jvynbvt.wav", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717141772, "uuid": "518c9471-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.28:58521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142200, "uuid": "50a5921e-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.186.66.98/ELCHAPO/Ukuiqh.mp4", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142226, "uuid": "5f9e9b38-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.3.114:45496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142226, "uuid": "60130e93-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.50:44369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142230, "uuid": "6265a86a-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.157.180:51828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142230, "uuid": "62815f1e-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.206.115.238:52789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142231, "uuid": "62e36d08-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.215.245:34768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142233, "uuid": "63fb7750-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.205.46:37757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142286, "uuid": "83eed355-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.143.162:57804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142346, "uuid": "a7220368-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/toffeezx/Spaceroom-4/main/RambledMimets.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142410, "uuid": "cda307b6-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.59.78:39947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142646, "uuid": "5a28f8b0-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.236.158:49502/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142664, "uuid": "6514e978-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.186.191:48187/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142709, "uuid": "7fd2d5cf-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.50:44369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142767, "uuid": "a253d982-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.206.228:56954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142887, "uuid": "e99aea60-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.100:58394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142945, "uuid": "0ca341c8-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.78.103.195/kickic.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717142947, "uuid": "0d6f1611-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.182.19.148/xampp/mni/newlionscameonthejungletheyaregreatattitudeandlionsareverypowerfulthrthingsareamazingfollowthemwithnewruleslionsareking___lionisalwayskingofjungle.doc", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "37167874-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.182.19.148/81910/lionisthekingofjunglenoothersbmpimages.bmp", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143017, "uuid": "378160ec-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.182.19.148/81910/AUFR.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143066, "uuid": "54892c5f-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.87.230:34703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143066, "uuid": "54917b57-1f25-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.86.202:34847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143367, "uuid": "07d83898-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.224:59648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143426, "uuid": "2af06e91-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.169.54:50627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143546, "uuid": "72c55378-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.157.180:51828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143549, "uuid": "744968a6-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.168.1.227:38918/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143555, "uuid": "783cdc9d-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.2.205:40001/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143665, "uuid": "b9810de9-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.191.234:50176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143665, "uuid": "b9a12e48-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.1:39559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717143995, "uuid": "7e36e13d-1f27-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.206.115.238:52789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144410, "uuid": "75852892-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.184:52299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144447, "uuid": "8bea7415-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.189.148:49830/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144514, "uuid": "b3e7457d-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.206.228:56954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144572, "uuid": "d5ed9a13-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.143.197:47328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144572, "uuid": "d66a2666-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.202.202:60095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717144894, "uuid": "9640b751-1f29-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.169.54:50627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145228, "uuid": "5d436904-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.48.177:47659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145346, "uuid": "a3cdeded-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.212.142.18:47331/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145350, "uuid": "a5b325d1-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.249.190:38938/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145350, "uuid": "a632fb3a-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.193.146:57773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145353, "uuid": "a7c9fee7-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.155.152:59510/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145409, "uuid": "c904e211-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.1.161:59799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145409, "uuid": "c93ce63c-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.192.21:41071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145425, "uuid": "d27580dc-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.132.103:36582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145530, "uuid": "10f76e51-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.76.205:37186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145769, "uuid": "9fda6c1d-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.56.235:60130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145827, "uuid": "c212415f-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.102.211:59453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145828, "uuid": "c3015a3f-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.12.239:54493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717145946, "uuid": "09780497-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.249.190:38938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146072, "uuid": "54332535-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.16.97:44948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146134, "uuid": "79211e9a-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.184:52299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146244, "uuid": "bb1b16c2-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.236.15:37453/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146246, "uuid": "bc289579-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.104:57715/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146246, "uuid": "bc29218a-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.22.8:51121/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146247, "uuid": "bc5c4491-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.206.88:59936/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146247, "uuid": "bcc17844-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.213.116:48991/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146261, "uuid": "c4f4a1fd-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.176.167:59604/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146274, "uuid": "cccba2b1-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.154.72:45616/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146277, "uuid": "ce6c5704-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.158.174:55351/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146279, "uuid": "cfab949a-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.219.249:45000/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146369, "uuid": "0563f2db-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/toffeezx/Spaceroom-4/main/CapSimple.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146378, "uuid": "0a70f00e-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.37.93:54839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146787, "uuid": "fe94541e-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.9.101:47834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717146913, "uuid": "49955217-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.61.76:57165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147086, "uuid": "b06986be-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.192.21:41071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147147, "uuid": "d4ed1bb2-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.80.178:51587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147147, "uuid": "d4fe7445-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.43.2:44829/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147147, "uuid": "d50622d8-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.56.235:60130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147147, "uuid": "d51f7b40-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.146.233:50310/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147155, "uuid": "da16564a-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.6.72:60131/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147208, "uuid": "f9608fd3-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.76.205:37186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147208, "uuid": "f969b97e-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.16.97:44948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147268, "uuid": "1ce03965-1f2f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.165.208:38262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147517, "uuid": "b17645d1-1f2f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.60.60:55509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147823, "uuid": "67d0ed2d-1f30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.237:37445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717147933, "uuid": "a967f970-1f30-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.157.224:14327/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148114, "uuid": "1521c4f6-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.171.71:38262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148169, "uuid": "362000ae-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.205.107:47248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148212, "uuid": "501c9c86-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.242:53172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148286, "uuid": "7c1a84c0-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://minemaincap6-1-24.blogspot.com////////////////hohoiii", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148287, "uuid": "7c879385-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://minemaincap6-1-24.blogspot.com/hohoiii", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148287, "uuid": "7ca7278a-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://minemaincap6-1-24.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148287, "uuid": "7cb85b43-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/!api/2.0/snippets/migameiskie/dq7MXB/9ce9f34bb4b197603960f000d8c82c5a1d846324/files/file", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148411, "uuid": "c6399ef4-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.61.76:57165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148586, "uuid": "2ec5a637-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.9.101:47834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148587, "uuid": "2f4a99d2-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.39.180:46365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148588, "uuid": "2fc76971-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.76.254:37862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148588, "uuid": "303b7ecf-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.49.90:52517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148711, "uuid": "790622f2-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.28:54686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717148946, "uuid": "054d3b71-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.197:59418/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149013, "uuid": "2d3b3e8d-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.102.32:55025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149066, "uuid": "4d0283d7-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.165.208:38262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149126, "uuid": "70b3e20b-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.117.106:37883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149132, "uuid": "743b3007-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.224.160:37511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149246, "uuid": "b817c4b4-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.237:37445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "b92a387b-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.78.103.195/ivy5dNMhe9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149248, "uuid": "b96c3403-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.78.103.195/YU5FcDWihk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149251, "uuid": "baf9cc23-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.206.2:39060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149312, "uuid": "df6f4914-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.103:36377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149315, "uuid": "e120a295-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.59.83:52881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149320, "uuid": "e418ed60-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.55.206.98:41801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149394, "uuid": "1044e5be-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.174.116:44223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149486, "uuid": "47428958-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.36.163:38796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149546, "uuid": "6b21b0ea-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.5.100.215:39171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149726, "uuid": "d6376fbf-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.46:51664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149909, "uuid": "43572fa0-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.206.2:39060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717149968, "uuid": "66938274-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.216.184:53262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150008, "uuid": "7e99faa2-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.234.242:53172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150026, "uuid": "89591608-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.46:51664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150147, "uuid": "d13f7559-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.39.180:46365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150148, "uuid": "d17b3250-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.55.206.98:41801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150213, "uuid": "f8caa74d-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.180.63:58521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150222, "uuid": "fdcdf716-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.143:60730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150327, "uuid": "3cb48f20-1f36-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.39:52622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150747, "uuid": "36f11b99-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.25.237.54:36333/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150747, "uuid": "371852ed-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.158.97:47690/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150748, "uuid": "37264252-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.224.160:37511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150748, "uuid": "3754320b-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.214.221:44838/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150749, "uuid": "3824607d-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.190.174:51181/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150990, "uuid": "c7ed168a-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.103:36377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717150993, "uuid": "c950dae2-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmhumm439dmpr.cloudfront.net/down/tianya/tianya_1.3.0_240531_2.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151050, "uuid": "eb45befb-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmhumm439dmpr.cloudfront.net/down/sgp/sgp_0528_100.apk", "Tag": [ { "name": "Autogenerated-phishing", "colour": "#211033", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151109, "uuid": "0e98d874-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.169:46880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151166, "uuid": "30d0fdf6-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.165.158:35884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151208, "uuid": "495edc9a-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.108:41042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151286, "uuid": "782578bc-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.176.98:35375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151288, "uuid": "794e83cf-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.149:47608/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151443, "uuid": "d5e5a9ce-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.93:41253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151470, "uuid": "e5b042d8-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.36.163:38796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151473, "uuid": "e783e360-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.164.115.233:52139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151532, "uuid": "0a907231-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.235.164:39468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151532, "uuid": "0a90cc21-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.111.174:40026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151664, "uuid": "593c2598-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.221.47:33717/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717151957, "uuid": "082f8756-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.43.136:55082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152069, "uuid": "4aa15c51-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.172:43010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152084, "uuid": "5396cf6c-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.131.87:46588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152312, "uuid": "dbe234a5-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.216.175:45317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152367, "uuid": "fca972ae-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.199.123:40331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152547, "uuid": "6779985a-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.176.98:35375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152549, "uuid": "68a6405a-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.170.91:43209/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152551, "uuid": "6a47b554-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.105.71:41651/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152573, "uuid": "77751477-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.124.60:40854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152726, "uuid": "d24cbde7-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.205.187.173/xd/Copy0761000025pdf.exe", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717152747, "uuid": "deb82438-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.129.93:40454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153086, "uuid": "a8ae5374-1f3c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.165.158:35884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153272, "uuid": "17c9c837-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://a0989607.xsph.ru/site/logo2.jpg", "Tag": [ { "name": "dropped-by-SmokeLoader", "colour": "#f35152", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153275, "uuid": "19d2ac12-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.203.254:47686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153447, "uuid": "805da66c-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.174.138:37516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153447, "uuid": "805ef74c-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.182:47919/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153452, "uuid": "82e7f146-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.61.9:37336/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153510, "uuid": "a5a715a5-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:37496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153516, "uuid": "a9210c45-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.87.157:34526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153635, "uuid": "f022f36a-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.46.168:33285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153688, "uuid": "0fecc883-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.100.178:42735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153813, "uuid": "5a7adafc-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.131.87:46588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717153876, "uuid": "7fa418a4-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.193:60691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154048, "uuid": "e63ad2cf-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.220.220:40365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154048, "uuid": "e64f40e6-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.187.230:37334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154314, "uuid": "84fd64c8-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.96.217:34167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154346, "uuid": "98017fb0-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.206.115.238:52789/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154346, "uuid": "98192f11-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.42.244:37844/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154347, "uuid": "985bb054-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.251.239:42737/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154347, "uuid": "98a16243-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.187.230:37334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154410, "uuid": "be3c62ba-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.46.168:33285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717154767, "uuid": "932ebe3f-1f40-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.137.146:58393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155088, "uuid": "528ba694-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.174.138:37516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155100, "uuid": "59681db6-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.203.254:47686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155132, "uuid": "6c937323-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.103:53887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155191, "uuid": "8fbb8d89-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.98:49286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155259, "uuid": "b841b5cd-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.21.9:56947/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155671, "uuid": "adec3d43-1f42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.146.170:55272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155787, "uuid": "f2b046ef-1f42-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.96.217:34167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155969, "uuid": "5f300873-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.6.72:60131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717155969, "uuid": "5f6e6795-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.219.208:45061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156026, "uuid": "814854e2-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.220.220:40365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156088, "uuid": "a610cd39-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.6.72:60131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156148, "uuid": "c9f3f4fd-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.33.177:43753/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156160, "uuid": "d1766fa4-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.69.165:38137/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156271, "uuid": "1373c24f-1f44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.225.212:56574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156391, "uuid": "5b0f5436-1f44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.85.116:40294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156626, "uuid": "e6fea5a4-1f44-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:37496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717156868, "uuid": "772549b5-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.225.44:54221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157045, "uuid": "e0bc078e-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.192.82:59117/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157047, "uuid": "e230acf5-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.46.22:54047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157048, "uuid": "e239961c-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.170.144:51935/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157050, "uuid": "e36a1965-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.30:37431/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157050, "uuid": "e3b95892-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.183.237:43508/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157053, "uuid": "e54e92ac-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.252.51.16:39692/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157061, "uuid": "ea112792-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.157.101.244:43642/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157061, "uuid": "ea307b66-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.148:34411/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157075, "uuid": "f2a9e68f-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.255.30:48266/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157110, "uuid": "074dff87-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.203.20:36459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157168, "uuid": "2a49b525-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.99.34:54460/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157227, "uuid": "4d202832-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.93.223:34176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157347, "uuid": "94b23a3e-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.210.178:52430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157415, "uuid": "bd4c9885-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.1.28:33660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157466, "uuid": "dbcbe744-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.146.170:55272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157585, "uuid": "22ddc3eb-1f47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.194.50:50073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157592, "uuid": "26e1c069-1f47-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.202.148.153:42815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717157977, "uuid": "0c0f516c-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.137.160:37542/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158010, "uuid": "1fec01f4-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.85.116:40294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158068, "uuid": "4296d62b-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.98:49286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158150, "uuid": "7322f927-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.202.91:45236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158331, "uuid": "df1179de-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.189.24:33011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158547, "uuid": "601a936b-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.211.157:57660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158734, "uuid": "cf3cb731-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.225.44:54221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158765, "uuid": "e219b193-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.200.166:36280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158794, "uuid": "f3431f57-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.200.117:49326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158851, "uuid": "14f9b5c0-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.5.29.169:59744/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158912, "uuid": "3976a8ac-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://pasteio.com/raw/xfbiWyaQgCYb", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158913, "uuid": "3a60d929-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.1.28:33660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717158971, "uuid": "5cca9e0f-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.118.66:43942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159210, "uuid": "eb517a4d-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.83:49309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159274, "uuid": "111ad9af-1f4b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.236.252:46166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159748, "uuid": "2bfcc5fd-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.189.24:33011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159814, "uuid": "52e812ac-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.82.124:42263/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717159927, "uuid": "966b903a-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.202.91:45236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160050, "uuid": "dfb2050c-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.173.230:59865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160170, "uuid": "2750b122-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.42:50716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160370, "uuid": "9e7d1a55-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.209.33:45590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160412, "uuid": "b7943574-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.211.232:41695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160648, "uuid": "4407404b-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.204:50825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160650, "uuid": "4597886c-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.183.193:46178/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160771, "uuid": "8d994714-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.32.42:54978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160772, "uuid": "8e095785-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.230.2:36734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160827, "uuid": "af1c3e47-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.24.193:46920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160887, "uuid": "d273ddad-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.236.252:46166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160947, "uuid": "f6611e56-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.160.166.69/VnXDVQVhgDKRfIC208.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717160952, "uuid": "f984468e-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.40.237:32983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717161547, "uuid": "5bffb476-1f50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.70:51014/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717161731, "uuid": "c9dbaf88-1f50-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.78:41521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162086, "uuid": "9d89cf43-1f51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.211.232:41695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162087, "uuid": "9db29364-1f51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.87.196:57243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162146, "uuid": "c13234b6-1f51-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.83:49309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162274, "uuid": "0d5ba7c0-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.204:50825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162335, "uuid": "31c83ac3-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.158.183:44187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162450, "uuid": "76528125-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.130:33509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162571, "uuid": "beb06550-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.230.2:36734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162630, "uuid": "e184965a-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.24.193:46920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162630, "uuid": "e185ace3-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.214.182:47919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162870, "uuid": "70a65644-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc863235369_679837367?hash=zdXuZmJTL7PohwqzBBTT918D6ds8elLRejxekCtBep8&dl=v1slqC2ezWH6xZckfa8Ul7Zr23i80xprKsPXbJBpbd8&api=1&no_preview=1#xin", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162873, "uuid": "72997331-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.131.187:40024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162987, "uuid": "b6a8050e-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc863235369_679837297?hash=gY7fYpuu9L2StYCM8zkybZuffSKTkufmfZLayC5XeWT&dl=3pROcYbEvpMyOObQFfNBxjvYA7XUNELSDeGE6cJ7MAX&api=1&no_preview=1#pgx", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717162993, "uuid": "ba39a431-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.7.29:51400/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163053, "uuid": "de009996-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.45.67:43139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163227, "uuid": "457522d2-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.208.117:54841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163346, "uuid": "8c36d283-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.78:41521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163346, "uuid": "8c8a1a72-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.207.54:34072/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717163346, "uuid": "8cab0567-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.97.171:52398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164127, "uuid": "5dd31b62-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.109:39156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164204, "uuid": "8c02b9b5-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.130.21:46952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164247, "uuid": "a5510f9c-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.191:37412/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164311, "uuid": "cb905bdb-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.42.101:42357/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164366, "uuid": "ec4e5d36-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.224.111.110:45067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164426, "uuid": "105e0d09-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.45.130:33411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164436, "uuid": "16404729-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.162.102:40723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164486, "uuid": "341a3d52-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.130:33509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164561, "uuid": "60db2afd-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.45.67:43139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164610, "uuid": "7da8d053-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.131.187:40024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164846, "uuid": "0a5c9186-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.72.230.167:39950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717164911, "uuid": "31108d18-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.129.88:55868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165155, "uuid": "c2d1dc54-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.27.201:55356/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165160, "uuid": "c5e95012-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.198.10:43321/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165266, "uuid": "0512873e-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.208.117:54841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165271, "uuid": "07c1955c-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.129:39337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165445, "uuid": "6fbaeee9-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.42.42:50716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165507, "uuid": "94b370a0-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.115.46:34975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165873, "uuid": "6e69e4dd-1f5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.224.111.110:45067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165894, "uuid": "7b3bb603-1f5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.86:33151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165929, "uuid": "8fd83430-1f5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.109:39156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717165929, "uuid": "902aabc4-1f5a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.130.21:46952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166169, "uuid": "1f1bc239-1f5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.122:56047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166230, "uuid": "43496092-1f5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.45.130:33411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166285, "uuid": "647337ff-1f5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.72.230.167:39950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166408, "uuid": "ad93a76d-1f5b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.183:38195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166591, "uuid": "1a5441db-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.6:54372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166600, "uuid": "2019f94e-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.192.251:45045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166710, "uuid": "614c673e-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.129.88:55868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717166770, "uuid": "857fc419-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.92.223.97:23934/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167011, "uuid": "152f3c9e-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.143.167:56518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167068, "uuid": "3726089e-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.129:39337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167132, "uuid": "5cf486c6-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.97.194.93:41023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167248, "uuid": "a2192de7-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.86:33151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167308, "uuid": "c607d1ad-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.115.46:34975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167327, "uuid": "d160f8a3-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.195.37:53044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167367, "uuid": "e8e91c7d-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.37.122:56047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167787, "uuid": "e34dd9e2-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.12:36449/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167788, "uuid": "e413acce-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.51.174:49191/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167802, "uuid": "eca2971d-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.191.146:53467/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167819, "uuid": "f652f2f7-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.205.28:39926/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167820, "uuid": "f6d9ac64-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.214.124:47098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167848, "uuid": "07d32600-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.146.92:41037/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167852, "uuid": "0a3e00fa-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.147.106:49682/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717167853, "uuid": "0acc298c-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.194.189:47511/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168091, "uuid": "988fd928-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc863235369_679841162?hash=iuBNguPuZnc4dY4tX5aYPz4UPOKX004Sy3zzRC1UUaP&dl=KGYD3UYPfjsDXSFQnwxRDzohDIoZDzn24zHZxMdwWHH&api=1&no_preview=1#1", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168146, "uuid": "b9aa54f7-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.183:38195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168146, "uuid": "b9b8448b-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.6:54372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168161, "uuid": "c2937f3c-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.56.17:52074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168356, "uuid": "36966b80-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://softcatalog.ru/download/40/4a6ca328-7888-3279-b672-d1d9d0a46ee2/GTA_V.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168359, "uuid": "387044b5-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://get-bundle.fun/gta/downloads/ru/GTA-game.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168403, "uuid": "52590b0b-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://dailynewspagechannels.com/Wasabi.msi", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "9416b348-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1VdjiXz5q68BpL3hynAQU7G9Q16IShghP", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168513, "uuid": "942342ac-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1wxbn9SpB_Y9q5b8bmZs8UydCODij3xNt", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "b660f2c3-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1_wIlRWY3oUNh1mnb6il6srWDI1Ujl6rh", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "b6610656-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1wSQkirDngjLT8uu2lV9MZCIkS4my12JH", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168570, "uuid": "b666010e-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=189v0fZraz5HlSqtG0u3kQK-8SyTfOFjU", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "b6b5976b-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1cqTYgpX9GdoyWNTPrwUb0xBCKivIF6iY", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "b6ba8284-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Q2fSZfUKK1D8MxwIA7WY6U4FSE2vZ07H", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168571, "uuid": "b6c7437f-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1FrOdy8HCPK15mvEteDKDi2QXUh-uwgyy", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "b75ef0b2-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1UR2IbPHmXiPKXb5ErNF34acfZZj2Jga4", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168572, "uuid": "b791dead-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1MTyWXnmYUaE6TEZ8Rxi5WGUZpkOGPOLG", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "d88e01b0-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1PvGVrcomCCQLLrFbaAXotCP-GyyH3onZ", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168628, "uuid": "d8e4f502-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1vjg69WJ0ki5und6jHvoqBP260znuPFJM", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168757, "uuid": "2597a684-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.194.193:60521/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168879, "uuid": "6e934c7c-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.105.68:58260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168931, "uuid": "8d4c3cf4-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.85.173:32835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717168986, "uuid": "ae258168-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.110/softbot.mpsl", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169109, "uuid": "f79e8ed6-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.79.97:48548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169168, "uuid": "1a4d3d0b-1f62-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.187.138:36053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169595, "uuid": "193cb59e-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.68.131:58319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169611, "uuid": "229fde19-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.71:36701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169661, "uuid": "40a53d5f-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.219.65:49230/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169689, "uuid": "510d6a33-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.198:58564/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169714, "uuid": "5ff206fb-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.184:43023/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717169890, "uuid": "c8d7cc02-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.226:39537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170067, "uuid": "323238e3-1f64-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170427, "uuid": "08dbebb3-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.8.183:33647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170427, "uuid": "090c54bf-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.213:40969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170428, "uuid": "096f7393-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.131:38227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170547, "uuid": "50b8bbac-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.197.172:32888/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170547, "uuid": "50b90f39-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.68.131:58319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170547, "uuid": "50cb7335-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.60.125:54706/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170549, "uuid": "51de0bf9-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.72.99:54968/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170553, "uuid": "542d8380-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.78.56:40494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170568, "uuid": "5d134990-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.222.122:37751/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170610, "uuid": "75dbaa78-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.187.138:36053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170637, "uuid": "8672c80d-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.85.173:32835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170670, "uuid": "99e13758-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.238.196.70:60833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170846, "uuid": "02e8f8b9-1f66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.79.97:48548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717170908, "uuid": "276f63e2-1f66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.71:36701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171086, "uuid": "91f0d943-1f66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.226:39537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171092, "uuid": "9529112b-1f66-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.146.191:54923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171334, "uuid": "25a17541-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171334, "uuid": "25a86214-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171334, "uuid": "25aec539-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171334, "uuid": "25e4246c-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171335, "uuid": "261884a6-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171335, "uuid": "263ce889-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171335, "uuid": "2662dd37-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171335, "uuid": "266cd03e-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171336, "uuid": "2692f80f-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.111/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171386, "uuid": "44bb6430-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc863235369_679843835?hash=suKDfAiMrHH7ckmSUXZevv4qZwUC9nuvumk23eLiozL&dl=z6t0wDOYm1ZeMLpULXJ4k7UCfC7Kkn2pALy82ZLyVzL&api=1&no_preview=1#mene", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171510, "uuid": "8ec4fba3-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.53.25:43120/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171569, "uuid": "b1a870e4-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.135.221:38507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171572, "uuid": "b3589315-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.69:43873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171627, "uuid": "d4282921-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.56.17:52074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171687, "uuid": "f8160ca7-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.131:38227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171812, "uuid": "424c49ba-1f68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.125:57964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717171869, "uuid": "64c5e825-1f68-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.238.196.70:60833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172347, "uuid": "81515b47-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.107.95.29:50793/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172412, "uuid": "a84d4392-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.61.45:43874/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172419, "uuid": "ac73c828-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.168.2.139:33387/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172445, "uuid": "bb879de6-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.80.245:52283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172766, "uuid": "7b7087d7-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.177:41927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172767, "uuid": "7c05a275-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.84.60:54514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717172827, "uuid": "9f852d48-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.182.69:43873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173073, "uuid": "3216b275-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.4shared.com/rar/O5gBwqqkiq/Quasar_v140__1_.html", "Tag": [ { "name": "quasar_rat", "colour": "#547c7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173074, "uuid": "32dfd543-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.4shared.com/rar/cQE9gEePiq/spynote_v50.html", "Tag": [ { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173075, "uuid": "331db27c-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.4shared.com/rar/4tNhmHRAiq/Redlinestealer2020-main.html", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173129, "uuid": "53c781a6-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://mega.nz/file/JCtAmDBY#sbX9ZagTfA-CvObuBZP_XdC4Jr6tdkXwtJPd2vzr2Js", "Tag": [ { "name": "proton", "colour": "#16b75c", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173132, "uuid": "55048b0f-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mirrored.to/files/4EOJ5ID1/Proton_RAT.zip_links", "Tag": [ { "name": "proton", "colour": "#16b75c", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173132, "uuid": "5510398b-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.177:41927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173191, "uuid": "78864b57-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.4shared.com/zip/0F-Q_tHVfa/Proton_RAT.html", "Tag": [ { "name": "proton", "colour": "#16b75c", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173251, "uuid": "9c7c49b6-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.255.46:48477/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173485, "uuid": "28016a9d-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://mega.nz/file/uhFW3YDR#280awKGiZujHpjUGwJQCpAfxPNNx2pAmAlgw74Wlvhs", "Tag": [ { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173544, "uuid": "4b20345d-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.usercontent.google.com/download?id=1XXXbdHwgCV7qYbey1uLGGND8l_zeYJhg&export=download", "Tag": [ { "name": "SpyNote", "colour": "#ac1889", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173546, "uuid": "4bd0b166-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.135.221:38507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173845, "uuid": "fe4c5473-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173845, "uuid": "fe6d5115-1f6c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717173912, "uuid": "25f7d928-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.34.96:52834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174061, "uuid": "7ebdb45e-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.65.39:59232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174149, "uuid": "b371dd95-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.83.151:45513/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174386, "uuid": "409e9d2b-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.110/softbot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174387, "uuid": "413da4a5-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.207.240:47640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174388, "uuid": "41e69ad1-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.158.251:56563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174509, "uuid": "8a0a078a-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.229.174.144:55900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174569, "uuid": "ad9128b5-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.236:44139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174629, "uuid": "d1a7f452-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.155.18:57786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174686, "uuid": "f373725f-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.136.209:47376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174825, "uuid": "46a6e70b-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.71.152:60457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717174927, "uuid": "83818c52-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.59.172:40637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175045, "uuid": "c9c872b4-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/shk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mioro-botnet", "colour": "#888ec7", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175047, "uuid": "ca7e925d-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.166.18:48074/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175234, "uuid": "3a37a498-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.45:34145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175307, "uuid": "65e37d98-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.238.205:60583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175471, "uuid": "c72ef1ea-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.84.105:48260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175474, "uuid": "c92f080b-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.65.39:59232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175585, "uuid": "0b302e72-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:50730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175587, "uuid": "0c65386d-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.64.221/t3t3t3t3t3t3t3t3pdefault/t4p0nt07.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175589, "uuid": "0d95ebf0-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.64.221/t3t3t3t3t3t3t3t3pdefault/t4p0nt07.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175651, "uuid": "32b5dd3a-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.68:56073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175827, "uuid": "9b6b3371-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.105:43164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717175949, "uuid": "e43b3821-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.44.148:49647/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176126, "uuid": "4e2a22a3-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.105:43164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176126, "uuid": "4e2a29e0-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.229.174.144:55900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176186, "uuid": "71b3011e-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.59.172:40637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176186, "uuid": "71c2bf86-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.195.252:37797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176186, "uuid": "71df9b09-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.15.118:50128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176365, "uuid": "dc99c0d5-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.236:44139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176367, "uuid": "dd697179-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.155.18:57786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176486, "uuid": "2496f16f-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.194.138:38566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176790, "uuid": "d9c1e3bb-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176790, "uuid": "d9d57697-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176790, "uuid": "d9d97026-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176790, "uuid": "d9ede3ea-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/i6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176790, "uuid": "d9efb740-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da0bd5a6-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da0f473b-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da1c20bd-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da1f6bf3-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da200cc9-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da24bc9e-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da364421-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176791, "uuid": "da6a8b4f-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.240/i5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miori-botnet", "colour": "#f60681", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176792, "uuid": "dac03aac-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.71.152:60457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176847, "uuid": "fbcecbc4-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/76d32be0.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176847, "uuid": "fbea44b5-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/jaws", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176849, "uuid": "fce47086-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.185.217:53819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176912, "uuid": "22a89c65-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.230.245:52349/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "447343c4-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/bin", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "44812ad0-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/aws", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "4482c6f0-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/huawei", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "4493e5a5-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/goahead", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717176969, "uuid": "4497e6e1-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/gpon443", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177087, "uuid": "8a76d39d-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.194.138:38566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177155, "uuid": "b2fd6dbf-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.67.231:49926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177325, "uuid": "189fbe80-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/sora.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177325, "uuid": "18c5ece4-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/pay", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "18dd432f-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/thinkphp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "18e25436-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/realtek", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "18e741e4-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.97.210.243/lg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177326, "uuid": "1929960f-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.180.235:57368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177329, "uuid": "1aafc449-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.212.35:55324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177634, "uuid": "d088c38b-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.68:56073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177687, "uuid": "f061db28-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.188:37425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177688, "uuid": "f0fd1a99-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.198.133:37015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177746, "uuid": "13701255-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.195.252:37797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177809, "uuid": "391fe065-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.15.118:50128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177810, "uuid": "3954eeac-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.72.216:55812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717177987, "uuid": "a30ab6fe-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.92.235:34165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178009, "uuid": "aff96df2-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://free.360totalsecurity.com/totalsecurity/360TS_Setup_Mini_WW.Peter.CPI202405_6.6.0.1060.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178046, "uuid": "c634a710-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.25.62:41743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178379, "uuid": "8ce64674-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.232.109:42252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178468, "uuid": "c1b65497-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.1.161:59799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178533, "uuid": "e86cac61-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.12.99:52213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178589, "uuid": "0a269604-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.171.253.88:60155/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178590, "uuid": "0a570472-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.46.46:58648/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178590, "uuid": "0ac18331-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.226.159:47162/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178592, "uuid": "0bfb73ab-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.145:36670/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178607, "uuid": "148a855b-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.6.15:39995/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178615, "uuid": "19727847-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.32.172.205:10943/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178616, "uuid": "19e58773-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.14.77:52082/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178632, "uuid": "2348527f-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.78.147:55686/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178648, "uuid": "2ce7e995-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.119.30:40573/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178648, "uuid": "2d3c7a4d-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.117.66:47919/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178650, "uuid": "2e470a61-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.36:44085/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178727, "uuid": "5bf75ee5-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.158:60338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178887, "uuid": "bb65d220-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.43.110:54531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717178954, "uuid": "e39d91ce-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.84.193:53224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179066, "uuid": "26438f81-1f79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.188:37425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179137, "uuid": "50cb3f4a-1f79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.148.152:54333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179184, "uuid": "6cbba640-1f79-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.198.133:37015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179547, "uuid": "44efd7df-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.180.235:57368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179552, "uuid": "47c819c8-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.19.40:58403/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179852, "uuid": "fa9e404e-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.180.187:57204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717179910, "uuid": "1d63dd33-1f7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.25.62:41743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180215, "uuid": "d3333715-1f7b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.202.76:41536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180625, "uuid": "c7b38972-1f7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.214.34.220:48916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180626, "uuid": "c83d5727-1f7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.63.243:37933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180686, "uuid": "ec18f7a2-1f7c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.148.152:54333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180746, "uuid": "0fba8e8c-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.210.41:34901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180809, "uuid": "34f94ecb-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.129.226:60569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180809, "uuid": "35478759-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.65.190:32999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180810, "uuid": "358d1db3-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.135:50074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717180927, "uuid": "7b6d7358-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.193.33.175:4746/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181230, "uuid": "2ff9a83e-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://bfmgw.sticky.oystergardening.name/editContent", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181290, "uuid": "53bdfdfd-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.218:44514/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181351, "uuid": "780afbfb-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.112:59709/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717181891, "uuid": "ba463544-1f7f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.199.228:53362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182010, "uuid": "0124db24-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.135:50074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182067, "uuid": "22e41c00-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://monoblocked.com/385134/setup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182072, "uuid": "26026dd0-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.13.194.118/ADServices.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182072, "uuid": "263efb7e-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.66.47/files/New.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182074, "uuid": "27311095-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.47.70/lend/smartsoftsignew.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182077, "uuid": "28f5ecb7-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://f.123654987.xyz/385134/setup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182080, "uuid": "2a770ed6-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.126/jerry/putty.zip", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182080, "uuid": "2aec4364-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.126/jerry/Whitejerry.zip", "Tag": [ { "name": "DanaBot", "colour": "#860d30", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182176, "uuid": "63b78e69-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.103.188.126/jerry/WJL.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182187, "uuid": "6a5b83c1-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.100:43731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182245, "uuid": "8d59faff-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.214.34.220:48916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182255, "uuid": "92d88cc8-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.29.55:38403/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182367, "uuid": "d5ecb270-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.191.158:60338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182372, "uuid": "d883d887-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.197.89:49270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182372, "uuid": "d8cf1465-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.164.66:54506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182426, "uuid": "f91fff41-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.202.76:41536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182546, "uuid": "40361d1e-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.63.243:37933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182546, "uuid": "404aafd1-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.193.179:33748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182547, "uuid": "4105be29-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.218:44514/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717182672, "uuid": "8b79f4fe-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.185:49174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183026, "uuid": "5e82de54-1f82-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.38.69:55615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183387, "uuid": "35cf49dd-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.152.100:48952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183509, "uuid": "7e7ceb96-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.46.14:40684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183511, "uuid": "7fb3b651-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.164.240:33569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183566, "uuid": "a055d38c-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.100:43731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183580, "uuid": "a8a0bf4b-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.69.44:44757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183746, "uuid": "0bb569f3-1f84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.43.110:54531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717183747, "uuid": "0c25dfa3-1f84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.165.182:55380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184048, "uuid": "bff7105c-1f84-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.232.241:52795/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184167, "uuid": "0692f87f-1f85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.113:34576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184303, "uuid": "57abb770-1f85-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.140.97:34342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184646, "uuid": "24508e23-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.227:42935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184678, "uuid": "378b880f-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.246.78:42980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184946, "uuid": "d6d5d5e4-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.38:49052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184946, "uuid": "d6ea094e-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.248.205:55461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717184946, "uuid": "d708bee2-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.152.100:48952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185009, "uuid": "fc47f2d9-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.165.182:55380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185130, "uuid": "44da9d0e-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.118.169.4:53013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185247, "uuid": "8aab6319-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.228:59082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185253, "uuid": "8e3f8230-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.140.97:34342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185793, "uuid": "cfb10adf-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.232.4:53625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185852, "uuid": "f2d61784-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.236.136:35102/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185852, "uuid": "f2d90cdb-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.214.251.228:36329/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185852, "uuid": "f30d6103-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.81.36:49789/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185864, "uuid": "fa063590-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.213.46:48119/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185914, "uuid": "181c9b88-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.135.208:49325/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717185968, "uuid": "3808728f-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.72.113:34576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186146, "uuid": "a24146f6-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.191.146:53467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186268, "uuid": "eae6cabc-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.227:42935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186388, "uuid": "3262b472-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.190.115:52974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186513, "uuid": "7cb99014-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.226:54536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186749, "uuid": "09e21e18-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.52.189:53252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186750, "uuid": "0a4dae10-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.36.26:51383/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186752, "uuid": "0b629f25-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.169.199:43362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186819, "uuid": "3359cf75-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.155.195:59384/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717186986, "uuid": "9726d7b5-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.228:59082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187138, "uuid": "f1bfd15c-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.185.196.45:56069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187288, "uuid": "4ad7f460-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.57.133:43865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187301, "uuid": "52afdb56-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.7:38343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187301, "uuid": "52c172c2-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.199.245:58160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187473, "uuid": "b9458064-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.60.122:43448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187473, "uuid": "b9638574-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.95:33005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187534, "uuid": "ddc317e4-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.6.241:42793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187652, "uuid": "23ef21ea-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.201.43:59341/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187772, "uuid": "6b71fed3-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.22.11:45069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187828, "uuid": "8cc7de7a-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.127.95:56590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187890, "uuid": "b1c7523f-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.151.247:53998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717187947, "uuid": "d3b5b70e-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.226:54536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188067, "uuid": "1b3a1d62-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.180.244:43067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188134, "uuid": "43774037-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.66.96:41967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188260, "uuid": "8e38a504-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.202.216:57327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188425, "uuid": "f0d77d7a-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.52.189:53252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188487, "uuid": "15a54088-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.20.97:37337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188547, "uuid": "3918d1e8-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.207.174.248:52342/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188555, "uuid": "3e1dd23a-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.85.158:45610/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188560, "uuid": "4143c6a6-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.223.98:39507/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188909, "uuid": "11079a64-1f90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.7:38343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717188966, "uuid": "3339058d-1f90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.62.225:54417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189210, "uuid": "c4b5aa8c-1f90-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.6.241:42793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189387, "uuid": "2e2ef39d-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.17.78:46165/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189392, "uuid": "30f14523-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.244.253:37086/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189415, "uuid": "3e9ebb4f-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.32.172.198:10174/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189415, "uuid": "3ea0b7dc-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.49.178.39:55274/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189420, "uuid": "417c4151-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.10.224:48749/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189446, "uuid": "517c1da0-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.60.1.220:55383/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189447, "uuid": "51d7dae6-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.204.100:34685/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189452, "uuid": "5503301a-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.45.178:32980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189480, "uuid": "65b10b17-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.39.103.252:34573/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189530, "uuid": "837cd347-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.71:36336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189626, "uuid": "bc530727-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.66.96:41967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189687, "uuid": "e0a7f02c-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.91.145.139:2513/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189751, "uuid": "0727844b-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.181.20:34747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189754, "uuid": "088c1862-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.151.247:53998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189814, "uuid": "2c6ad447-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.190.127:55960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189816, "uuid": "2dacff7a-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.40.79:53763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189925, "uuid": "6ef05fbd-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.166.170:38860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717189926, "uuid": "6f523495-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.230.42:59604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190001, "uuid": "9c36e84a-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.202.216:57327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190020, "uuid": "a7329684-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.242.174:41500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190226, "uuid": "223297ff-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.62.225:54417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190347, "uuid": "6a861ed2-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.89.21.81:42161/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190348, "uuid": "6ac28e61-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.179.85:51866/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190467, "uuid": "b20b145d-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.61.72.136:38884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190587, "uuid": "f97d768d-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.158:32904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717190887, "uuid": "ac40eb20-1f94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.52.33.141:57695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191014, "uuid": "f7f1cec8-1f94-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.45.178:32980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191073, "uuid": "1b29cf30-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.71:56067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191132, "uuid": "3e41110d-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.190.127:55960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191133, "uuid": "3ed3b2b2-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.104.240:36742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191253, "uuid": "85fb880f-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.125.227:45686/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191548, "uuid": "361d015a-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.40.79:53763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191549, "uuid": "36cb01d4-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.242.174:41500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191562, "uuid": "3e9d6cbf-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.63:42370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191667, "uuid": "7cc47d5b-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.179.23:59210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191667, "uuid": "7ce84fba-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.230.42:59604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191856, "uuid": "ed794373-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.195.107:38472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191968, "uuid": "308a27ae-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.70.36:58772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191968, "uuid": "309d59cf-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.161.113:39136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717191977, "uuid": "359e01d0-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.73.150:57119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192146, "uuid": "9ab02058-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.89.104:50506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192147, "uuid": "9b52f7df-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk.com/doc863235369_679844267?hash=x0n11PfRcIZCQTmTAce82o4HI5Sze3ppZhchlDgnymo&dl=k2xD5fmvOsHBCsjvQnlZ8CWz6Gl5BEx2G7hHHmsaoAw&api=1&no_preview=1#crypto", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192385, "uuid": "292c055f-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.158:32904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192386, "uuid": "29b9055d-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.107.74:52527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192450, "uuid": "4fb77113-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.175.165:34393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192453, "uuid": "516cef8b-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.166.78:39548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192507, "uuid": "71e40f03-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.161.113:39136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192516, "uuid": "77575702-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.35:43647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192566, "uuid": "94d82403-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.68.162.186:55781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192569, "uuid": "96ed4df0-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.192.25:50988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192746, "uuid": "fff98ef2-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.252.204:56172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192833, "uuid": "343729aa-1f99-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.64:44744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717192868, "uuid": "48dc3694-1f99-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.73.150:57119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193046, "uuid": "b2e071ce-1f99-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.228.199.82:40702/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193287, "uuid": "4287739b-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.203.163:34218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193287, "uuid": "42e77847-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.108.209:60573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193348, "uuid": "66cddff6-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.28:36248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193410, "uuid": "8c21cb3c-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.188.98:44320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193416, "uuid": "8f68121e-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.197:58877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193468, "uuid": "ae3ece44-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.181.217:60349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193646, "uuid": "188671e5-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.89.104:50506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193646, "uuid": "18bd635e-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.107.74:52527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193831, "uuid": "8698937a-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.193.64:44744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193947, "uuid": "cbe094e0-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.166.78:39548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193952, "uuid": "cede8058-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.148.139:46680/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717193965, "uuid": "d6833cba-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.199.250:60815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194010, "uuid": "f17d10b5-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.76.142:33956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194309, "uuid": "a3b945e2-1f9c-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.68.162.186:55781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194731, "uuid": "9f652a32-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.223.185:40738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194791, "uuid": "c2fe890a-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.252.151:33244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194848, "uuid": "e529e44f-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.59.78:52739/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194862, "uuid": "ed3d9548-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.9.58:44665/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717194939, "uuid": "1b0d64e5-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.195.106:57150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195029, "uuid": "50a8afa5-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.28:36248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195089, "uuid": "7496f529-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.199.250:60815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195091, "uuid": "75be9526-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.45.229:41763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195210, "uuid": "bc8c3ad3-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.54.87:48383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195267, "uuid": "deb3a49c-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.171:41210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195447, "uuid": "49fcd53a-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.87.99:45619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195511, "uuid": "6ff59956-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.8.1:42539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195511, "uuid": "7080e34f-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.36.65:40521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195747, "uuid": "fc9af923-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.127:41796/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195747, "uuid": "fcb4b1ce-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.150.76:51220/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195747, "uuid": "fcc3b431-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.150.225:38945/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195759, "uuid": "03db522c-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.116:54138/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195928, "uuid": "689b8e38-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.97.42.217:1756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195986, "uuid": "8b39ce47-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.81.192:49830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717195986, "uuid": "8b7a434e-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.223.185:40738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196229, "uuid": "1bea1dde-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.91.178:37162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196284, "uuid": "3d1d75ad-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.39.110/mpsl", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196290, "uuid": "4075116d-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.130.130:55037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196345, "uuid": "6172d717-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.252.151:33244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196498, "uuid": "bc6fc8b3-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.204.226:43447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196548, "uuid": "da9318dd-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.180.189:60002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196767, "uuid": "5ca15f92-1fa2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.199.138:56847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717196887, "uuid": "a48ed15d-1fa2-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.171:41210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197126, "uuid": "32e1c61e-1fa3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.47.254:36124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197280, "uuid": "8ec9c79c-1fa3-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.137:51567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197485, "uuid": "0909651e-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.87.99:45619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197488, "uuid": "0ab3a9e2-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.43:50199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197546, "uuid": "2d4f8fd6-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.255:55753/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197546, "uuid": "2d57c695-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.166.192:54894/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197610, "uuid": "53178339-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.81.192:49830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197846, "uuid": "e0099ac3-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.130.130:55037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717197910, "uuid": "05f3d755-1fa5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.199.138:56847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198216, "uuid": "bc6f5700-1fa5-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.180.189:60002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198449, "uuid": "476c750e-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.38.69:55615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198450, "uuid": "480b39c1-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.238.13:44759/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198489, "uuid": "5f4a1c1f-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.198:55572/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198747, "uuid": "f8d792db-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.54.174.95:41232/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198748, "uuid": "f9726cae-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.64.14:43339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198927, "uuid": "646ff360-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.41.226:60118/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717198996, "uuid": "8d9972f2-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.190.121:45717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199046, "uuid": "ab3346cb-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.57:44551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199046, "uuid": "ab7e46a0-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.42.34.209:48289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199226, "uuid": "1676b576-1fa8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.208.218:51791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199286, "uuid": "3a101152-1fa8-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.20.65:55290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199766, "uuid": "58a0cd96-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.37.99:40474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199766, "uuid": "58a22da0-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.66:41041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199887, "uuid": "a045aef4-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.42.34.209:48289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1717199944, "uuid": "c2bd6cb6-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.141.154:46881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149307, "uuid": "dc7b4682-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.55.206.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157165, "uuid": "2836712d-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.99.34", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157045, "uuid": "e09979e0-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.46.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "07867d5f-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.46.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185124, "uuid": "414e88c3-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.118.169.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141742, "uuid": "3f9ed64a-1f22-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.186.66.98", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717190884, "uuid": "aa95c8d9-1f94-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.52.33.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191966, "uuid": "2f29fbce-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.70.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124584, "uuid": "4c398bf9-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.74.226.119", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143544, "uuid": "71b2fc71-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.2.205", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169592, "uuid": "1733dd3c-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.175.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139165, "uuid": "3f6ff3eb-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.79.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191546, "uuid": "34d0d565-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.113.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133646, "uuid": "65caab0b-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.44.148", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117685, "uuid": "3c43fc6a-1eea-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.151.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164125, "uuid": "5ca336a2-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.97.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125666, "uuid": "d1369edd-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.24.144.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186745, "uuid": "0729f57d-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.169.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170663, "uuid": "95dc3acd-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.238.196.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127344, "uuid": "b9549e81-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.246.182.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199043, "uuid": "a99d9b49-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.42.34.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142224, "uuid": "5e791b49-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.206.115.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198924, "uuid": "62c6f7d0-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.41.226", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114144, "uuid": "fdb80c9e-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.231.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171565, "uuid": "af366943-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.135.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179545, "uuid": "43a7a444-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.19.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167784, "uuid": "e19934e7-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.214.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184045, "uuid": "be220d2a-1f84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.232.241", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149484, "uuid": "45dba73a-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.36.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113844, "uuid": "4ac7cee5-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.42.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160164, "uuid": "23828ac1-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.42.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116184, "uuid": "bd65c7df-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.33.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187531, "uuid": "dbf3e722-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.6.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137784, "uuid": "0858d7b0-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.0.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185244, "uuid": "888195b9-1f87-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.20.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195264, "uuid": "dd28a140-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.193.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132509, "uuid": "c039661b-1f0c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.195.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149124, "uuid": "6f7af976-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.224.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182184, "uuid": "68d00fba-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.229.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155188, "uuid": "8df162f0-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.23.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175824, "uuid": "99d4ff27-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.230.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137843, "uuid": "2b73a19b-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.230.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151106, "uuid": "0cf498cc-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.247.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194788, "uuid": "c14df542-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.252.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171808, "uuid": "4061aa8f-1f68-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.150.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191966, "uuid": "2f2a0aff-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.161.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149307, "uuid": "dc751f94-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.59.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180807, "uuid": "33def7c1-1f7d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.88.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146784, "uuid": "fcccdbfb-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.9.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122066, "uuid": "6f4ded3a-1ef4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.92.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146065, "uuid": "4fdb7467-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.16.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117266, "uuid": "42c03297-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.15.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134664, "uuid": "c479e244-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.9.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167125, "uuid": "58a4e19f-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.97.194.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185845, "uuid": "eecec512-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.213.46", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140065, "uuid": "58205b84-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.214.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169649, "uuid": "39760d1f-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.219.65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151648, "uuid": "4f92dc79-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.221.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188544, "uuid": "37d039ca-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.223.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168866, "uuid": "66c201a2-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.105.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141625, "uuid": "f96cdec1-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.114.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117444, "uuid": "acc68aca-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.118.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167784, "uuid": "e1993cb7-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148584, "uuid": "2da05beb-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.39.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188484, "uuid": "140aff87-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.20.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176846, "uuid": "fb25e66f-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.185.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124343, "uuid": "bcf569d2-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.206.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174384, "uuid": "3fb75368-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.207.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172410, "uuid": "a6d4e329-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.80.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134664, "uuid": "c47a28cd-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.111.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138206, "uuid": "03dc3781-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.190.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166584, "uuid": "16426d67-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.192.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150209, "uuid": "f63c85f8-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.193.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124584, "uuid": "4c396287-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.193.229", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192505, "uuid": "70c44ad0-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.193.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192807, "uuid": "24a4adea-1f99-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.193.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168745, "uuid": "1e7c5d67-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.194.193", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191844, "uuid": "e656eba4-1f96-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.195.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116544, "uuid": "942da886-1ee7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.195.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167306, "uuid": "c4b45042-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.195.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130107, "uuid": "284eb20b-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.197.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135325, "uuid": "4ebe2e1d-1f13-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.197.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717165143, "uuid": "bba7ebf4-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.198.10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135444, "uuid": "95970a08-1f13-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.198.32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113844, "uuid": "4ac7e758-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.198.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187284, "uuid": "48c3e757-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.199.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193944, "uuid": "ca587e9e-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.199.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188244, "uuid": "84bc73aa-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.202.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158125, "uuid": "6450e980-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.202.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126269, "uuid": "3895902c-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.203.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136344, "uuid": "ae3c006c-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.204.135", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135023, "uuid": "9a9aea8b-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.204.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117809, "uuid": "863da884-1eea-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.204.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130525, "uuid": "2144d6dc-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.204.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124764, "uuid": "b7d3384a-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.205.124", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120144, "uuid": "f5dd686d-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.205.27", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138324, "uuid": "4a31caab-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.207.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168144, "uuid": "b83e2f98-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.56.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180624, "uuid": "c6d3e015-1f7c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.63.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163043, "uuid": "d80c758a-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.45.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187284, "uuid": "48c40a83-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.57.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114144, "uuid": "fdb80148-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.59.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114385, "uuid": "8d24ef01-1ee2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.60.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164184, "uuid": "7fa140b5-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.130.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145407, "uuid": "c7ddac6d-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.132.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137724, "uuid": "e44658d0-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.133.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184284, "uuid": "4cb02cf1-1f85-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.140.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140244, "uuid": "c260dc2f-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.182.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126686, "uuid": "317268b0-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.184.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198447, "uuid": "4628fa63-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.185.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142643, "uuid": "58a38cdb-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.186.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178706, "uuid": "4f80cb0f-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717144387, "uuid": "67d7ea9f-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153865, "uuid": "792b251c-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147812, "uuid": "6129355a-1f30-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.191.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133224, "uuid": "6a23932c-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.66.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132143, "uuid": "e6115a85-1f0b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.69.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189507, "uuid": "756bf3d5-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126807, "uuid": "7950ab28-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.78.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167784, "uuid": "e199027c-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.191.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189983, "uuid": "91935bf3-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.242.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147144, "uuid": "d33e43d7-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.6.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136764, "uuid": "a88ec9d3-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.64.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177144, "uuid": "acb76b98-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.67.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183564, "uuid": "9f1dd34a-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.69.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191966, "uuid": "2f2a1b59-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.73.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "0786aed6-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.78.147", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164424, "uuid": "0edc0de8-1f57-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.162.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157045, "uuid": "e096fbbd-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.210.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175284, "uuid": "57d112dc-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.238.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123264, "uuid": "39cda18d-1ef7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.15.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138683, "uuid": "201f62ec-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.178.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196525, "uuid": "cca27377-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.180.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158308, "uuid": "d1ce0130-1f48-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.189.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186507, "uuid": "79aa86da-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.32.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120866, "uuid": "a4289be2-1ef1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.38.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183506, "uuid": "7cdbdf29-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.164.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182365, "uuid": "d463daaf-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.164.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183744, "uuid": "0a894a8b-1f84-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.165.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152544, "uuid": "662676be-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.124.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123745, "uuid": "58439e41-1ef8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.243.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195744, "uuid": "fb370255-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.81.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717165870, "uuid": "6cb5bbbf-1f5a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.81.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123323, "uuid": "5d156720-1ef7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.91.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126625, "uuid": "0d2682c3-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.15.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115284, "uuid": "a53549aa-1ee4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.206.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194846, "uuid": "e3a764e5-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.9.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170545, "uuid": "4f251ca6-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.222.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130764, "uuid": "b03fc582-1f08-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.223.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182244, "uuid": "8c64785e-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.29.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117383, "uuid": "8890deb8-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.6.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156145, "uuid": "c80b2470-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.69.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146364, "uuid": "0280458a-1f2d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.37.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139044, "uuid": "f71c9462-1f1b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.45.54", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153624, "uuid": "e962ca8f-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.46.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188544, "uuid": "37cfff4a-1f8f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.85.158", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717165505, "uuid": "92f8bd1b-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.115.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178645, "uuid": "2b2c18bc-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.117.66", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178645, "uuid": "2b2c0146-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.119.30", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191249, "uuid": "83e00037-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.125.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175225, "uuid": "34d24a29-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.32.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179123, "uuid": "487b5e01-1f79-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.148.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130464, "uuid": "fd318325-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.249.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151164, "uuid": "2f5c8b2d-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.255.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122847, "uuid": "414e2b96-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.114.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152066, "uuid": "48c45596-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.131.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113844, "uuid": "4ac802d4-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.35.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138443, "uuid": "90e502da-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.57.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138144, "uuid": "ded3bdcb-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.83.41", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158732, "uuid": "ce0f3ca9-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.200.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160343, "uuid": "8eb6ac44-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.209.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128244, "uuid": "d1dc01cf-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.192.170", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181883, "uuid": "b5054b6e-1f7f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.199.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158790, "uuid": "f0bbacf0-1f49-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.200.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138144, "uuid": "ded3f95b-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.200.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178344, "uuid": "77b901f7-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.232.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148167, "uuid": "34bb8517-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.234.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151528, "uuid": "0891a0a9-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.235.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197245, "uuid": "7993da15-1fa3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.237.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122367, "uuid": "22e1c1ab-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.239.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136109, "uuid": "21f2618a-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.223.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145344, "uuid": "a258d224-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.249.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156145, "uuid": "c80ad365-1f43-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.33.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717114744, "uuid": "6338c8c8-1ee3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.34.229", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186745, "uuid": "0729f2d2-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.36.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166165, "uuid": "1ccb3c21-1f5b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.37.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120866, "uuid": "a4273936-1ef1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.39.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115531, "uuid": "388e1942-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.39.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136344, "uuid": "ae3bcf2a-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.41.83", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175944, "uuid": "e14bead7-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.44.148", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181344, "uuid": "73c1c777-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.45.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170424, "uuid": "0779b594-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.45.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195086, "uuid": "72dd91b4-1f9e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.45.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134064, "uuid": "5ec70a0b-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.47.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136344, "uuid": "ae3c35a0-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.47.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131123, "uuid": "86404a40-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.132.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131306, "uuid": "f33a7aa2-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.19.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119309, "uuid": "047a57c7-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.28.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140066, "uuid": "58244c82-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.39.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124164, "uuid": "5245f439-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.190.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "07864656-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.6.15", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118344, "uuid": "c51733b6-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.163.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152544, "uuid": "662769d0-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.170.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118824, "uuid": "e3494c7d-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.173.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167844, "uuid": "059fced3-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.194.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196465, "uuid": "a8faac86-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.204.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189445, "uuid": "5077d431-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.45.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157408, "uuid": "b8ebffa4-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.1.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145824, "uuid": "c039b7e5-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.102.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137248, "uuid": "c89534d5-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.104.202", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152544, "uuid": "6627369f-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.105.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151528, "uuid": "08918372-1f39-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.111.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153444, "uuid": "7e9fd669-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.174.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152066, "uuid": "48c498ba-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.2.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193408, "uuid": "8b0869e3-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.2.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133412, "uuid": "da6ddbfe-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.221.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113784, "uuid": "27656b40-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.32.215", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145763, "uuid": "9c364913-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.56.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153444, "uuid": "7e9fffca-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.61.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146244, "uuid": "bad49316-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.176.167", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187284, "uuid": "48c3dec2-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.189.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198984, "uuid": "867a401a-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.190.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128664, "uuid": "cc4c4627-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.88.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127883, "uuid": "fadeb6e3-1f01-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.94.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189684, "uuid": "df1f5274-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.91.145.139", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149965, "uuid": "64dde7a5-1f35-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.216.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143364, "uuid": "06682c88-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.252.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122847, "uuid": "414f8e01-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.42.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133469, "uuid": "fc908d3d-1f0e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.239.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136764, "uuid": "a88c04b6-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.91.25.19", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128484, "uuid": "60e51a8a-1f03-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.171.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177324, "uuid": "17f57d18-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.212.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155247, "uuid": "b103afaa-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.21.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717165143, "uuid": "bba7ee38-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.27.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169649, "uuid": "3975e391-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.30.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138144, "uuid": "ded3f0d2-1f19-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.69.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717113965, "uuid": "92ca5b11-1ee1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.71.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174808, "uuid": "3c5e3e1d-1f6f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.71.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117383, "uuid": "8890f73f-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.76.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717190465, "uuid": "b05ce217-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.61.72.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717138264, "uuid": "269e5122-1f1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.9.129.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154765, "uuid": "91a83912-1f40-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.137.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130406, "uuid": "da58d2a5-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.211.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142643, "uuid": "58a39f22-1f24-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.236.158", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143663, "uuid": "b8509dd8-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.191.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127045, "uuid": "070c797b-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.193.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150745, "uuid": "35aeddcb-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.133.214.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130046, "uuid": "03c7da47-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.117.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717180212, "uuid": "d152c11b-1f7b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.202.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199764, "uuid": "570b9165-1fa9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.37.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172765, "uuid": "7a64ded1-1f6a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.84.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145224, "uuid": "5ab90539-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.172.48.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168924, "uuid": "89217140-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.85.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197544, "uuid": "2c1fbf6e-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.166.192", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167784, "uuid": "e199393d-1f5e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.205.28", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119784, "uuid": "1f93c69d-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.4.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145344, "uuid": "a25a4bef-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.193.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162447, "uuid": "7480894d-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.219.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184644, "uuid": "22d81b2e-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.219.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178884, "uuid": "b9f091de-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.43.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133646, "uuid": "65cac1e4-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.180.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192443, "uuid": "4ba5e638-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.175.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717190344, "uuid": "6864416a-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.89.21.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157345, "uuid": "933f5f18-1f46-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.210.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193285, "uuid": "4130b7da-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.108.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199223, "uuid": "14fe3ea5-1fa8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.208.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177807, "uuid": "3795b224-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.72.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148943, "uuid": "03b85c81-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.32.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717190585, "uuid": "f7edbb37-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.33.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192144, "uuid": "99294ebc-1f97-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.89.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162332, "uuid": "2fe1a25d-1f52-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.158.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119368, "uuid": "27305697-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.22.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139944, "uuid": "0fde2315-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.58.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187470, "uuid": "b783defe-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.63.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174564, "uuid": "aabb3f19-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.66.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126983, "uuid": "e2662b21-1eff-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.33.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717163344, "uuid": "8b16b6a7-1f54-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.97.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157583, "uuid": "2181f890-1f47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "143.202.148.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198745, "uuid": "f7caf17a-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.54.174.95", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157045, "uuid": "e098c2a6-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.252.51.16", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189445, "uuid": "5077973a-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.39.103.252", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153684, "uuid": "0d236fbb-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.100.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170545, "uuid": "4f259e9b-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.72.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135083, "uuid": "be42b410-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.172.171.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140846, "uuid": "298bb3c5-1f20-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.202.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115646, "uuid": "7d39a1d9-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.56.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170065, "uuid": "314acf38-1f64-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.97.210.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119189, "uuid": "bd061640-1eed-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.97.210.246", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136764, "uuid": "a88eeb19-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.116.24.86", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149006, "uuid": "294701e6-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.102.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717161725, "uuid": "c5fa1d33-1f50-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.30.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171508, "uuid": "8d410480-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.53.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717199043, "uuid": "a99de320-1fa7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.219.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181284, "uuid": "5005b34f-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.25.218", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173248, "uuid": "9aae988b-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.255.46", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195509, "uuid": "6edf6c1a-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.36.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160945, "uuid": "f50d2acf-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.40.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177685, "uuid": "eed4f0d8-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.198.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717158968, "uuid": "5b2ce437-1f4a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.118.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182665, "uuid": "878ed8b0-1f81-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.54.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162866, "uuid": "6e44b2db-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.131.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147144, "uuid": "d33e1d07-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.80.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134483, "uuid": "58f3c7de-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.91.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151164, "uuid": "2f5ccaa7-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.165.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146244, "uuid": "bad41cdd-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.219.249", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135083, "uuid": "be42abfa-1f12-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.108.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717122425, "uuid": "457df084-1ef5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.46.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152724, "uuid": "d0fe56c1-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.205.187.173", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AZORult", "colour": "#0f66a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136764, "uuid": "a88c363d-1f16-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.73.125.6", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mallox", "colour": "#b88df3", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148584, "uuid": "2da0616e-1f32-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.188.76.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162983, "uuid": "b41c808c-1f53-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.187.7.29", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156384, "uuid": "5686e943-1f44-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.59.85.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141265, "uuid": "232c5e83-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.59.87.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127283, "uuid": "95465518-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.19.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717135924, "uuid": "b3e04a2b-1f14-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.91.89.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178525, "uuid": "e3b56f2b-1f77-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.12.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196283, "uuid": "3c78ddaf-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.130.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124224, "uuid": "75dd2006-1ef9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.170.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176484, "uuid": "232d0f71-1f73-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.194.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142224, "uuid": "5e7969c8-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119907, "uuid": "68db6681-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.57.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195444, "uuid": "48819c14-1f9f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.87.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125666, "uuid": "d13483d0-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.201.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137484, "uuid": "55410bca-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.21.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143544, "uuid": "71b2d483-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.168.1.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717172410, "uuid": "a6d4e888-1f69-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.168.2.139", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156265, "uuid": "0fd8b5c4-1f44-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.192.225.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166764, "uuid": "81ae434f-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.92.223.97", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189385, "uuid": "2cb3eb00-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.244.253", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160043, "uuid": "dbbf2a3b-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.173.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186745, "uuid": "0729e714-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.52.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185845, "uuid": "eeceb151-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.214.251.228", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717129623, "uuid": "08309bb5-1f06-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.144.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189809, "uuid": "29965b2d-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.190.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142224, "uuid": "5e7968b4-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.215.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160765, "uuid": "89cd1b2d-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.230.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717195983, "uuid": "89c94f5b-1fa0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.81.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124764, "uuid": "b7d30ad0-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.149.90", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137665, "uuid": "c17e7390-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.16.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "0786dc2b-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.14.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160765, "uuid": "89cd2cf8-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.32.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189809, "uuid": "29966b41-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.40.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "07868f45-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.73.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115284, "uuid": "a53566fd-1ee4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.242.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126567, "uuid": "ea9f4224-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137425, "uuid": "321791e1-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.245.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717130406, "uuid": "da58ee3e-1f07-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.210.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117383, "uuid": "8890e3c6-1ee9-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.4.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121584, "uuid": "5070bfc8-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.65.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717140244, "uuid": "c260f936-1f1e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.233.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116544, "uuid": "942d4dd5-1ee7-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.9.120.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145524, "uuid": "0d78f10d-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.76.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167007, "uuid": "126267be-1f5d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.143.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717144565, "uuid": "d1f5a9a8-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.143.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193344, "uuid": "645bdbfb-1f9a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.214.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717162084, "uuid": "9c6356ce-1f51-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.87.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149544, "uuid": "698e6c83-1f34-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.5.100.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119426, "uuid": "4a51e8c7-1eee-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.101.89.131", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126446, "uuid": "a24bc776-1efe-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.17.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717194846, "uuid": "e3a75ed9-1f9d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.59.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188964, "uuid": "321521f2-1f90-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.62.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137665, "uuid": "c17e7154-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187826, "uuid": "8ba154c5-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.127.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185845, "uuid": "eecefe5d-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.236.136", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717196225, "uuid": "19891e53-1fa1-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.91.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189385, "uuid": "2cb42f7b-1f91-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.10.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182365, "uuid": "d4648b94-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.197.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134544, "uuid": "7cd0b612-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.205.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128008, "uuid": "454c88c9-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.70.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177685, "uuid": "eed4ffed-1f75-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.73.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157583, "uuid": "2181e0fa-1f47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.194.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157045, "uuid": "e0976815-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.183.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173909, "uuid": "2441a3ac-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.34.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157045, "uuid": "e0972901-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.44.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187470, "uuid": "b780a7ba-1f8c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.60.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170545, "uuid": "4f25ce8d-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.60.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191130, "uuid": "3cd228ea-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.104.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160409, "uuid": "b5a27ed8-1f4d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.211.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134244, "uuid": "ca29ca6f-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.219.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133045, "uuid": "ff798f49-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.45.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717117143, "uuid": "f98a7cae-1ee8-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.90.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155666, "uuid": "aaa22a38-1f42-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.146.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137071, "uuid": "5f1ddbd0-1f17-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.164.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717142224, "uuid": "5e79485f-1f23-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.157.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186385, "uuid": "30b0cf8f-1f8a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.190.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127344, "uuid": "b9548c13-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.3.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717191070, "uuid": "19589214-1f95-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.38.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131183, "uuid": "a9d387f7-1f09-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.71.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154045, "uuid": "e493e2fe-1f3e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.220.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192384, "uuid": "281f15db-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.107.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164908, "uuid": "2f38a2ee-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.129.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148111, "uuid": "1358e647-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.171.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118765, "uuid": "bfc9964a-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.172.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175464, "uuid": "c379bb07-1f70-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.84.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146244, "uuid": "bad4e124-1f2c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.158.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717156865, "uuid": "756b9a89-1f45-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.225.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197484, "uuid": "080545b3-1fa4-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.255.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133825, "uuid": "d0485800-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.198.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164305, "uuid": "c7eb27b7-1f56-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.42.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141385, "uuid": "6a8ece53-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.170.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152365, "uuid": "fb528e5e-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.199.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717143424, "uuid": "29c70fdb-1f26-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.169.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174384, "uuid": "3fb742a4-1f6e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.153.158.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121044, "uuid": "0e868633-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.19.86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717183383, "uuid": "33878fc4-1f83-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.152.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124584, "uuid": "4c3920b1-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.146.249", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134007, "uuid": "3cf4e414-1f10-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.70.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120564, "uuid": "f05830ce-1ef0-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.150.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717186808, "uuid": "2cab3c19-1f8b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.155.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717133586, "uuid": "41f67941-1f0f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.237.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717131724, "uuid": "ec4fda07-1f0a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.80.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178943, "uuid": "dce2a04c-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.84.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717134606, "uuid": "a23d5460-1f11-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124525, "uuid": "29210d25-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.92.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717126144, "uuid": "ee343152-1efd-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.93.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717192443, "uuid": "4ba5d529-1f98-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.166.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717116124, "uuid": "9a07022d-1ee6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.51.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132624, "uuid": "04cdcc50-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.58.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717147507, "uuid": "ab7a0a39-1f2f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.60.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717146906, "uuid": "4599847f-1f2e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.61.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118765, "uuid": "bfc99ac2-1eec-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.65.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717188124, "uuid": "3d507a27-1f8e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.66.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170545, "uuid": "4f252ee0-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.78.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167844, "uuid": "059fe0f4-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.147.106", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145344, "uuid": "a25846ad-1f2a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.155.152", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717190344, "uuid": "686480d4-1f93-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.179.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150745, "uuid": "35aee39d-1f37-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.190.174", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717165264, "uuid": "03cc5d50-1f59-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.2.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115646, "uuid": "7d3981b2-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.229.187", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178645, "uuid": "2b2c1032-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.234.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169887, "uuid": "c71ae20c-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.237.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169165, "uuid": "18c3b926-1f62-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.187.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717123144, "uuid": "f23e4054-1ef6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.198.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124525, "uuid": "29215532-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.2.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717120144, "uuid": "f5dd5747-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.200.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153267, "uuid": "14a4ffb7-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.203.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149244, "uuid": "b6d9835c-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.206.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176909, "uuid": "20b3bf2e-1f74-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.230.245", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159266, "uuid": "0c95bc6a-1f4b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.236.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717198447, "uuid": "462acaef-1fa6-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.238.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124584, "uuid": "4c395bd3-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.6.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174025, "uuid": "698e9c17-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.65.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151413, "uuid": "c39b895b-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.68.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127344, "uuid": "b9547be7-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.167.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124764, "uuid": "b7d331a5-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.221.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121707, "uuid": "9995e22e-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.80.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717155129, "uuid": "6ab331ba-1f41-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717118408, "uuid": "eb1f1bcb-1eeb-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.106", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151284, "uuid": "76d33257-1f38-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.149", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185845, "uuid": "eecf2242-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.81.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717159808, "uuid": "4fd51bff-1f4c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.82.124", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717132924, "uuid": "b788d907-1f0d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.83.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717174145, "uuid": "b10de085-1f6d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.83.151", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153508, "uuid": "a4b552dd-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.87.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717144565, "uuid": "d1f5bfcb-1f28-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.202.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717127406, "uuid": "deadf190-1f00-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.206.32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717151947, "uuid": "01f05359-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.43.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717197123, "uuid": "313bd40e-1fa3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.47.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171084, "uuid": "906d5f3c-1f66-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.146.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717167844, "uuid": "059fa744-1f5f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.146.92", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717179844, "uuid": "f60385e5-1f7a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.180.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717189744, "uuid": "02d8b006-1f92-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.181.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171565, "uuid": "af365eac-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.182.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717160645, "uuid": "42963759-1f4e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.183.193", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717150324, "uuid": "3af6ea8a-1f36-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.183.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139584, "uuid": "394179cd-1f1d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.183.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717184644, "uuid": "22d80c72-1f86-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.246.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152724, "uuid": "d0fe79dc-1f3b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.129.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717137545, "uuid": "79c30c01-1f18-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.85.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185907, "uuid": "13aafb03-1f89-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.135.208", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717115709, "uuid": "a2acc4a6-1ee5-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.26.143.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717145824, "uuid": "c039c4ea-1f2b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.12.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717193944, "uuid": "ca5883dc-1f9b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.148.139", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176184, "uuid": "7033a002-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.15.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717152307, "uuid": "d894c798-1f3a-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.216.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717178585, "uuid": "078662ed-1f78-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.226.159", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717141208, "uuid": "00e63483-1f21-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.230.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717125544, "uuid": "8874728f-1efc-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.233.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124466, "uuid": "066262c9-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.242.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717149307, "uuid": "dc7a1f7d-1f33-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.24.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121044, "uuid": "0e868241-1ef2-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.105.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175644, "uuid": "2e628a59-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.131.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717157944, "uuid": "f8916373-1f47-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.137.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717166584, "uuid": "16426e9e-1f5c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.141.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717187887, "uuid": "afd27953-1f8d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.151.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717136109, "uuid": "21f07178-1f15-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.27.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717124764, "uuid": "b7d2cd57-1efa-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.82.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717177984, "uuid": "a132c070-1f76-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.92.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121465, "uuid": "09363cac-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.94.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717176184, "uuid": "7033b240-1f72-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.195.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717154344, "uuid": "96c2a176-1f3f-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.251.239", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121707, "uuid": "9993f69e-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.254.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717169711, "uuid": "5e2c28dd-1f63-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.93.184", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717185785, "uuid": "cb5913c5-1f88-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.232.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717170424, "uuid": "07798648-1f65-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.253.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717164844, "uuid": "0936b322-1f58-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.72.230.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717139106, "uuid": "1c070527-1f1c-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.252.218.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717128124, "uuid": "8a72425a-1f02-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.123.39.107", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168984, "uuid": "ad1430bd-1f61-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.123.39.110", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717171326, "uuid": "20e7512f-1f67-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.123.39.111", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182066, "uuid": "222cc070-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.103.188.126", "Tag": [ { "name": "DanaBot", "colour": "#860d30", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1717175583, "uuid": "0a5398b4-1f71-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.64.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717153267, "uuid": "14b52464-1f3d-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "a0989607.xsph.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717181225, "uuid": "2cd3aee0-1f7e-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "bfmgw.sticky.oystergardening.name" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168325, "uuid": "23e6abb5-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "dailynewspagechannels.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717182066, "uuid": "224da3ba-1f80-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "f.123654987.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717168325, "uuid": "23ffaefc-1f60-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "get-bundle.fun" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717148286, "uuid": "7be140f9-1f31-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "minemaincap6-1-24.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717121707, "uuid": "99a9c8ed-1ef3-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "orlandovargas.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717173131, "uuid": "548aa7f7-1f6b-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.mirrored.to" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1717119907, "uuid": "68e1dcf5-1eef-11ef-b2b7-82aee05be84a", "comment": "Malware payload delivery host", "value": "xdje.sticky.oystergardening.name" } ] } }