{ "Event": { "published": true, "date": "2026-03-17", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-17", "timestamp": 1773792924, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "1dd946a2-24e8-49f3-b597-d58884a76316", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773705607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705607, "uuid": "91d6c40f-9fd1-43c2-8336-430f60bd8513", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705607, "uuid": "cfdbca21-f8c6-4cb1-9372-966992f36ca9", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705607, "uuid": "19a5d0f2-29ee-45eb-b233-8214278e703b", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705607, "uuid": "607ae3de-710c-4d95-88a9-5fc85c5b0277", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773705607, "uuid": "f204d8bf-1f03-455a-aa8c-1c30a72776ec", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773706635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773706635, "uuid": "cf3a2d41-bed2-47f1-8852-1ba13ef3ea32", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773706635, "uuid": "88a18dc3-6e43-464a-beb0-74d5b110887d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773706635, "uuid": "1c2ca697-b597-49f2-9ea0-6d72484c2ed1", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773706635, "uuid": "2df0c012-2fc4-4fe9-96e5-acc915771918", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773706635, "uuid": "f63008d0-5211-40b0-bb65-71d36b3ad0f9", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a0a33a5-219b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773708519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708519, "uuid": "2f168ddc-6f93-4096-af77-23cd50cab36c", "comment": "Malware payload", "value": "6538a2a1cb11b4ff3aa2a1a802b2715a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708519, "uuid": "de6e2d25-350d-4715-a06a-36965ea634cd", "comment": "Malware payload", "value": "7bb8878e4f8ee6dcf30ec3b9b5a78a88ae28a7ec522d9e4759f7deccfc70a27e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708519, "uuid": "2f906313-b545-459b-8bac-c7b85d4bb262", "value": "T1AA34E09560F0BED9F7304D7B72C6ED17133908316C0B28A99F09E79B0C69142EAD8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708519, "uuid": "4a7eb487-a9fc-437b-8d41-6298784b9d81", "value": "3072:BaHuCWcLGJj3SpgHSN9duA+87fueDnNESGJ/W7ojFASNpw/FCn7Min/RJRd88jJP:gW2ifHSfdu8h7NESyoopXS/FCPhrrwwZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773708519, "uuid": "febfeed3-5872-4c2d-8fc2-c7d916ae8444", "value": 239685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708519, "uuid": "994f769a-d8be-41aa-b4b2-e2e94775c404", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773713652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713652, "uuid": "d83a279f-264e-4f03-9245-b33267aff144", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713652, "uuid": "b6ae4264-84bd-48be-b1f9-8861aebc56b4", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713652, "uuid": "9e82b45a-8909-43a8-9fab-f7baf384a4f0", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713652, "uuid": "e6c0570c-83b7-4486-bb07-fe63699e10c0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773713652, "uuid": "179c48d3-3202-456f-beac-3eb9465cb26c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a7953d-21a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773713798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713798, "uuid": "17a15094-ca38-4fea-a0be-8d9ba6796309", "comment": "Malware payload (Mirai)", "value": "090b393835edc289ffc7ed2dc07c29ea", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713798, "uuid": "5971e05d-dcc2-436a-b344-fd0071a6eed1", "comment": "Malware payload (Mirai)", "value": "495041f58815107ba8fd26c13b797308e569041d961305b0849d3fa2ad48597e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713798, "uuid": "fbd69247-039f-48bd-8045-cba5b6591da8", "value": "T120B3C70ABF511FFBE86FCD374AE9174528CC650A22A83B757934D918B24B64F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713798, "uuid": "92a36723-dd74-48ee-9edb-67edbcd53b41", "value": "1536:JcB6NIUYKX98YWAeGMjMb3Y39jXrDmsuFgx7EDwPNEFt2hmcJR:u6NIUYs8DAeGMjFNuFrAs63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773713798, "uuid": "4a08cf15-cf79-4624-aef4-7ff3469eb6b5", "value": 117332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713798, "uuid": "02e03922-86ec-40a4-b0a1-296326e525c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0ba6313-21a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773713953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713953, "uuid": "5faf058b-c02a-4763-9f63-cf4bf4504ce2", "comment": "Malware payload", "value": "6c9e3219abb91fd5cfb608748202f78f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713953, "uuid": "9d4c8bd8-a915-46c1-8b21-2e6d41cf8f48", "comment": "Malware payload", "value": "b8f808d53b63d453cabc35255519b2568fc5333b016153301556795ce58f3264", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713953, "uuid": "4bdec15f-d17a-4511-bbc6-af18ddf379b5", "value": "T1718309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713953, "uuid": "e639608e-aa38-4a49-be1c-0b2c74dda708", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnEWa/VN/:XEKltp9txAX/yr2pbEWKVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773713953, "uuid": "d55900df-fe26-4017-a4f1-ad47c4befd52", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713953, "uuid": "58e452f0-5cde-4699-936d-11688d9d0037", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1738faf1-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773714125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714125, "uuid": "a9caf4f5-46f7-4a7a-9f50-e339b59a9df6", "comment": "Malware payload (Mirai)", "value": "cac7a1b13db0bf84b18004d7dd92acdf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714125, "uuid": "4b3ad9a7-d352-4dfb-abd5-46f85d480feb", "comment": "Malware payload (Mirai)", "value": "49eefb1ac3dbc3583a33f8d7edd027f21f79394657f41c3aff0fa76b5d00023f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714125, "uuid": "f0e7ecf5-9fc4-4aa4-b8bb-cbd681415915", "value": "T1AC833B55BC819A22C6D4627BFB6E028D332613A8D2EF3217DD255F2037C691F0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714125, "uuid": "6fcdaaf0-b93a-45ab-b454-7aa719b497ec", "value": "1536:RvfsgWbSwErJZ9WadN2vkxwBrndgcgsiQr/6UPnvXCPHxLFW2BOpSYkPNhjVAh2:lfs9blOtdUmcLdRbr/FP+HxLkYZPf6k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773714125, "uuid": "5c9d27be-29f6-4504-bb67-509ed6bc7f53", "value": 88588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714125, "uuid": "0d11ea4d-b284-4c44-a77c-f52e7804d5da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2c074fc-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773714386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714386, "uuid": "3a8e52b5-696b-4072-b9f5-a6ec9df62b0e", "comment": "Malware payload (Mirai)", "value": "fa9bbf13960e9930c850bc6a9ade20a8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714386, "uuid": "a35cb8c1-769e-430c-b1a7-3e37cc3190b6", "comment": "Malware payload (Mirai)", "value": "a8b68ecbf611d6e8d93104f48787cec1c29379990fc29d6a333cde6e433225cd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714386, "uuid": "3fd0268c-41f6-4cc6-84b9-ee220d500065", "value": "T1EDA3295AB9819B11C5C112BAFE2E118D331327BCE2DF72128E149F2477CA92F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714386, "uuid": "86ad4171-f16e-44f8-8653-f8e3d4eeb652", "value": "1536:CNnXILAlgBLEP39Meh4r/PimMT+LqaoWJyhCEdxiuyYjyfYp7Wm5KYk7ypLZ:rLASBLLvu+LqaofyYjyfYpKmUx7yb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773714386, "uuid": "cec02ae2-8e07-4ec5-982c-de51c6986bc3", "value": 103568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714386, "uuid": "25ad32ca-5e10-4b85-b22b-828f6e09b417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea970e6a-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773714479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714479, "uuid": "011a48a9-265c-4f17-911f-0d5c4f61809e", "comment": "Malware payload (Gafgyt)", "value": "5f74f0a2d3c0238a940562883862d626", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714479, "uuid": "71889ea5-27c8-442c-bf86-a0f566a713f7", "comment": "Malware payload (Gafgyt)", "value": "317e07fa83a96a320b3c6bdd40a9a38e1b8e033f2997b6f9fc8a8c47dc2cd8ea", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714479, "uuid": "5ae8acbf-9b86-4f1a-b960-1211f9dba8d0", "value": "T1E5441845BE405E37CBC1667BFFEE42CD732617BCD2EA3202EE015B25369A45A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714479, "uuid": "ee0b560b-e8d3-4989-8470-def89ce81218", "value": "6144:azjISAN54AKlRZu6lycltDHebEiBVy/BbJE6cRtRwj4HbtxFPOteGb7u4gFG38wv:ojISAN5UR86lycltDHebEiBVy/ZJE6cY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773714479, "uuid": "1eaf42c0-df3a-42f8-a9df-d3332d826958", "value": 254232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714479, "uuid": "def88244-685f-454b-8f48-7be588dde674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd914ee-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773714483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714483, "uuid": "cd597d98-f43f-4539-aa41-69cda3600044", "comment": "Malware payload (Mirai)", "value": "5cfa9f11962be4758102f8b272dc6fce", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714483, "uuid": "15997ab9-a586-42cf-a59b-699038b95800", "comment": "Malware payload (Mirai)", "value": "ddf56914dd2555a795a9902bcafe6ddd8d75ebb5cd6a06828f5ff02b9568142a", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714483, "uuid": "c1c32805-cd4c-4ced-8232-a2de99d91ffa", "value": "T18D242955BC416F21C6D166BEFBBF81CA33132BFCE3DE3212DE0457153A8A85A0E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714483, "uuid": "4597fb28-83f9-4e16-816d-a2292e578a7f", "value": "6144:k5Av7w7/+LZmp6i/kZUi97jqzYqmL78GEFhQ7CZaMROosxK1TvqCi4t8VG:RzC/f6iUUi9720rL78GchQ7CZaeOosxO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773714483, "uuid": "1486acdb-203a-4d3f-a846-e63b5dc7f3ea", "value": 228548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714483, "uuid": "2e33baa0-ef00-45fd-9d7f-9a6e35c1e8c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773714547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714547, "uuid": "e05b3f86-4b3b-4260-aabe-44abb2bf76dd", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714547, "uuid": "3b6cbc00-8792-40e9-abdd-a756efcab801", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714547, "uuid": "6ab13a98-d5ae-4ec2-aab8-c5d37aefd017", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714547, "uuid": "f5e26e5d-1c72-433f-babc-509f3e603e51", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773714547, "uuid": "2ea2534a-ae0d-4ae9-959f-2de7a393a483", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a06dd159-21aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773715214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715214, "uuid": "f23a75cc-5fec-49d9-9732-e3b0baad16e2", "comment": "Malware payload (Mirai)", "value": "a3254048cf05f239dd1907c84dfa5d1b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715214, "uuid": "6feaef03-4bcc-472a-a811-8eca0dc85c1d", "comment": "Malware payload (Mirai)", "value": "07f723c4962c92c4330570edf20ef05570a6cd9c60c05d692f1676529d3e5239", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715214, "uuid": "0b3d9748-34de-446a-8930-4064255e234a", "value": "T18E836DC5A683E8F1EC520635207BEB335BB7F53D5069FB86C7649A32AC51601E6073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715214, "uuid": "20430f95-4c76-41cd-8391-ddf0de9b2497", "value": "1536:4sAAey8lqcGx4sXUSzcjoocdl56OfkQL0AnBEz32/KQdacr7Oifd+5SJ7SeXi:4V4cGx4StyoocR6GL0AnBEzm/KUaMCiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715214, "uuid": "44e411f0-e268-42c2-8f53-fa0c27ddb0e0", "value": 82832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715214, "uuid": "8013cf48-1b56-4aaa-ac47-196f5dbcd6a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87da328-21aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773715281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715281, "uuid": "5c964f77-e54a-424b-8c4d-92d693d1cd93", "comment": "Malware payload (Gafgyt)", "value": "01192fc1b646c9bb944b4d1508f3a1fd", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715281, "uuid": "015471f6-4ad7-4823-87d6-eef8d627bb13", "comment": "Malware payload (Gafgyt)", "value": "248541b184b3e6df19e18a74607544b5fca140cc502f16d81b39a54d0fffd729", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715281, "uuid": "7a524a5d-98a4-4d09-9380-f813dc7d1999", "value": "T11774080AAF911EF7C86BCE3742A50A4A30CC645762953B3A3574D624BE1F90F59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715281, "uuid": "463eee06-b56e-4f3c-95ba-7937ffd4b2c1", "value": "6144:64Wn2o/k56gDtSAcEBUD1FN+xrFrA+V2LI8owV:6kAAmXN+BFTVzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715281, "uuid": "78aa0a70-3ee8-4d36-b9d6-effc19b51876", "value": 356860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715281, "uuid": "02ba5d95-e381-48af-ab01-d4fe28fe4703", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22a87fdf-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773715432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715432, "uuid": "0a23a862-2399-4d76-b0ae-a00795249b46", "comment": "Malware payload", "value": "151cee810870388bb4ef23f87f46dab5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715432, "uuid": "b460fc0c-473f-4af9-acb6-d990fa3132c8", "comment": "Malware payload", "value": "c9eb4d40c2dfea7074904f6d129e9eb38dc2bc16fd8bfb91b0fe3029f0c90fbe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715432, "uuid": "298ab33d-6d26-48b1-81f7-5fa3cc06f2db", "value": "T12A93093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715432, "uuid": "efa1b76a-b5c7-40b8-a33f-f4aa0dd0fed0", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfivEsCZKc6x:pfQI7zEStkbFv2v05x9krmEsCZD6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715432, "uuid": "c70e72a0-3968-4227-951b-0cd17b30caa0", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715432, "uuid": "9b9a0f05-8a42-4d8b-9b4a-70fcd5dad719", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88367603-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773715603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715603, "uuid": "7c00b400-d5bd-490f-8b8a-1668e4115d9e", "comment": "Malware payload (Mirai)", "value": "9649be56437e7507780a451e18fca99d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715603, "uuid": "95160a3d-4223-4a2b-bf73-db491961e0c3", "comment": "Malware payload (Mirai)", "value": "4771b1cb3f6e33666f523f9c46b2a3d3ae83f616531376bff964be7420d7f64c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715603, "uuid": "e9e44ea3-9f2f-415e-8258-57c05e3600ba", "value": "T120933A41BC829A22C6D5627BFB6E418D371313A8D2EB320BDD159F2437C691F0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715603, "uuid": "3a501bec-150b-4a18-a3ef-49b0a725da48", "value": "1536:fLJEKN1bJCYeiIjknS3Xv0xvMJnRDuMDvWeWoalyg6CE9F2+OVjFe0JjO3avR2:fLxzbJO4SP22RDLrWgah6CEHccroU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715603, "uuid": "b3eae406-c967-42e8-a3a0-8d4ef89c183a", "value": 92084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715603, "uuid": "253c7284-25ce-4132-a055-afa650dc14ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21c35553-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload (WallStealer)", "timestamp": 1773715860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715860, "uuid": "a13c5730-6e62-4553-a808-868b7b6cfa29", "comment": "Malware payload (WallStealer)", "value": "79f4e0b394b2f0ca0573b983b84741f4", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715860, "uuid": "4f9f2298-d069-4058-ae96-8c9e9fcf380f", "comment": "Malware payload (WallStealer)", "value": "799adfb611860dc8cdfa7301953d68b7f54d2f2c6cbfcda80638cdf63d1fd1af", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715860, "uuid": "83e3c472-06c0-481f-ae23-8b51151d925b", "value": "T190A6638FA2748613C8E263B5B2063572BE2AD435479983B77CEDE435319F0BE4A718", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715860, "uuid": "8bac71a8-7934-4a35-aad2-6e30632c62f5", "value": "c334747502013390d6374d4b193bdf0e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715860, "uuid": "d7550a59-a6ff-4278-8560-a2dab583cced", "value": "49152:hg1Lgu9N+T65CEGvkBxiXGNg06K+5YHMv0GjhbwFdRInKdhYUtvYu2PZ1/e5u5Y8:R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715860, "uuid": "373ce15b-98d3-474f-aaec-9d7b9c775836", "value": 9485824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715860, "uuid": "c899c126-7d2e-403f-982a-c705701a7e82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61a53e34-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773715968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715968, "uuid": "7c79f7a4-caf2-4a0a-b436-053194ee7eb7", "comment": "Malware payload (Mirai)", "value": "f097f5a3d4b58c73fa34c4f244388ad3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715968, "uuid": "ab5d6ac0-a2cd-40d0-abd5-3b99c7375ba5", "comment": "Malware payload (Mirai)", "value": "e4b1f20f8871b0627493b302fe7763eed215521fc9455535f45cebeba9ebe62f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715968, "uuid": "9314d4fb-dd7b-4aed-a0a0-ee12491c3333", "value": "T1B473BF73C4195D40D19805B8B8F49E799B63E80096C72EF716AAC6F9804BEECF5093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715968, "uuid": "46177388-b874-4850-b18a-65fa46c7cd35", "value": "1536:uAlquTVRSOrQXvL01ArlBDpTkPyKuGfAf0efCyOdO10P2:uAgFm1unsefsMqu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773715968, "uuid": "0d8e49f3-1a4e-4f5f-96e5-d9eaec76e2f3", "value": 78984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715968, "uuid": "1c8e4c3a-024d-4a86-b651-723f8c9172a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "992fbb7f-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716061, "uuid": "5bad0629-6b03-4482-8e6f-2acac481cf92", "comment": "Malware payload (Mirai)", "value": "26fd151e9845aae7cfcc25d8166bcee3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716061, "uuid": "d9a94216-9d85-4037-85f2-c9abfdea23b4", "comment": "Malware payload (Mirai)", "value": "5c33abbfacc2d0cf0ec20cad9aa39027a2a898dff90a937fb0c25b96a6fb5627", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716061, "uuid": "934b0002-3fc5-4cbc-ac3b-7ec262407ddf", "value": "T17BB3B64E3E319FADFBA9823447F74B21A75833DA26E1C585D19CE5011E6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716061, "uuid": "af400676-8387-48e8-950e-db7bef185d99", "value": "1536:8knbBEfjImHMih8ITe9EKDwe/sEX80jslzrGkeYtPEhiTdu:FnbafjLh8hhwMsEX80jslzrGc2i5u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716061, "uuid": "e94e2385-f145-4a7a-8ffb-d2cebf4728e2", "value": 113236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716061, "uuid": "c1382dcb-42b9-424b-9b3b-c132a039b4c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e2979d-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773716139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716139, "uuid": "c00d883d-73f0-4b38-80ce-e5fe98b70dbe", "comment": "Malware payload (Gafgyt)", "value": "7d2a7ad98199fd93d41d3cae255599ae", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716139, "uuid": "7f2da8e5-99db-44c5-a3cc-b8699d3c0118", "comment": "Malware payload (Gafgyt)", "value": "72238d81a1373eb101a1ca9c1e45d977c58056ce6e0719cbdd8517e061e61c7f", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716139, "uuid": "59ea1e91-9deb-4473-a0ac-e813b7bf2aaa", "value": "T162442945BE405E37CBC0667BFFAE42CD332617FCD2EA3202DE015B25369A55A0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716139, "uuid": "0dd1aa63-066f-413b-bdd2-f52d2b518ead", "value": "6144:WdacUDoDmrlRZuh8nz6UERjMHPseH5+Y+nmGkjWrgHi+bSkg3YHzBh4/T4TgQ7Un:qacUDoDMREh8nz6UERjMHPseH5KnmGkU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716139, "uuid": "e38b555f-6b5d-436e-8d79-29f999ebf5b8", "value": 258328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716139, "uuid": "341dacb1-713c-444e-a463-168e470709ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e30c776b-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716185, "uuid": "45a39f5f-bcad-4dfb-bf23-ff5fb2c092a0", "comment": "Malware payload (Mirai)", "value": "12c5d626ee5f2750cad5904a621ad2f4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716185, "uuid": "53248cd1-eb09-41da-b362-6890777fd811", "comment": "Malware payload (Mirai)", "value": "f3bcaecfdcc7fd605227420bb280a43f8c501d4ca0d10a39ed93c725b5a8793c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716185, "uuid": "d78f9ae4-9b73-4f40-8f58-fa1a8985c626", "value": "T1C374C45B6A328F6EF279CA3587F74924D35933D712E1C685D1ACE9101E2024FA41FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716185, "uuid": "c05f3fba-8802-4627-94e4-7a28a0e4d676", "value": "6144:4rSzW3cf/CTP9/Z7h5oMzSLdA6xC7ggMY8+93bHtCIPi:R39I7ggpPi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716185, "uuid": "0cdcc922-878b-4e31-823a-0efbcf634828", "value": 356220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716185, "uuid": "98ad68fa-5ca3-4109-a8c6-f81b68cac8a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38b43384-21ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716328, "uuid": "fc3050c6-a0b9-4d62-882c-f88ae4a7f8f7", "comment": "Malware payload (Mirai)", "value": "131265082af55a499673746c9869a5ef", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716328, "uuid": "8e69154b-1889-4e40-b062-c1b581b07dc7", "comment": "Malware payload (Mirai)", "value": "810e2649ecd6ea1c485bf0c24e8227915e01856095de5acdd74008a9e681fb8e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716328, "uuid": "860cc04f-6d8e-4f52-8f4f-293d7dfe6252", "value": "T182A35B22B93A1D2BC5D4A43721F34375F2F6479E20A88A1E3DB10E8EBF2465036577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716328, "uuid": "599532d9-df45-4b84-98d0-b626bf93538e", "value": "1536:A67MBJy3APTJ8z45pjgjZKH6owvfdf9dHtCMKNj5CA/+0JQZ+atx5OLyqm1D:V7/3okff8MKNdCA/+M2OLyPD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716328, "uuid": "5be3f4fe-fe80-4588-bef4-34989e9db1a4", "value": 99476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716328, "uuid": "1ae274f1-831f-43f0-9512-cbf0c4ce7431", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2b3aa34-21ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716560, "uuid": "ace5ba86-446f-4f56-be34-ba5567d79e8b", "comment": "Malware payload (Mirai)", "value": "e6122bf22212fa0c7fead3bccfc435b9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716560, "uuid": "7a4f3e04-9223-4ce1-b58e-cfb20331f92d", "comment": "Malware payload (Mirai)", "value": "4208de25f695c102fde747594bd25d7c4fe1d9cacfa61f0d778fe78d1fa029a9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716560, "uuid": "2afa4ad6-1ce6-4ccb-9b55-3ffd2619a8ab", "value": "T1FF933B01770C0E47D1A71EB42D3F17E193EEE59021F4FA892A0EDB469176E72158AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716560, "uuid": "86d4465d-3641-42dd-8d3b-feefeff1d054", "value": "1536:feK2BnVCG+utibw+7yodqX69+XoWwLz3O6FHzv8NKpP6gN7yp48nnH:fBZbwJodqK9+J0q6FTvVb7yPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716560, "uuid": "cbfdc4f7-4aeb-4c6b-8ad7-7a12381c30e3", "value": 93048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716560, "uuid": "4de19c3c-31a8-43ea-a9be-56039535a20c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6cc91f4-21ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716621, "uuid": "bae204d1-89aa-4dd4-9d5b-6bf3d84f1a32", "comment": "Malware payload (Mirai)", "value": "928931054b05782968f62609988aded1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716621, "uuid": "eabe6bd3-20f4-482c-b9c9-cb928a8573b4", "comment": "Malware payload (Mirai)", "value": "490a7fb93b7ebfa266cbe6ecf87ecea61aeaaea8786414b548316c103e1c5007", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716621, "uuid": "99cadab8-ad2f-41e4-8ce3-0febfafead54", "value": "T180043A46DA818B13C0D61776FAAF42893323A764D3DB73068D28AFB43F8675E0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716621, "uuid": "0ae0f296-1b6e-4b5b-84ee-5818e634fdad", "value": "3072:dRAQXXKVJye8vW6za6xU1x4PTI3+df/KgKHp8e7+/tM/9+InI:DnXCt83za6xU1x4Ps3wnKJHWe7+lM/9w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716621, "uuid": "767aea05-f629-46f4-b326-aa08d8a98a83", "value": 173886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716621, "uuid": "0076dbe8-c741-4bf7-9813-1e09ed269c57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ead324ad-21ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716627, "uuid": "b67aa511-d17c-47a9-af66-6f7417706fd0", "comment": "Malware payload (Mirai)", "value": "57de77e810ead6ccd02d6421538f60e0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716627, "uuid": "b7907309-5875-4d99-99a7-19cbd558d53d", "comment": "Malware payload (Mirai)", "value": "1708621d7ed75e711d925cb96436fa5a5403c29c5b71b5159170114c532962b5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716627, "uuid": "868c81a9-41fe-44ba-a866-c008ef7ee0ab", "value": "T1CD737EC5F683D8F1EC120B31207BEF339676E53A1029EB83D7A6A977AD52601E5432", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716627, "uuid": "4ed6a4c1-fb5a-41c6-82b4-47ed9c888e42", "value": "1536:x9o7RGP2SAUTB43YbJ+xk6yb6XB7QPoUJ/shvFRbldfiOqN50n:EwP2SAK63eJ+C36XB7QA0kh9F/fem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716627, "uuid": "0a16e473-4172-4c99-a80b-9ba9616dd664", "value": 78740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716627, "uuid": "5d799d02-7547-448b-8244-0387ba58d21a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bf81ee6-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716683, "uuid": "495e59f6-ba7b-48ef-b0e7-ee186e2a4b47", "comment": "Malware payload (Mirai)", "value": "69dd579838cc52908d66f709fecc00e5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716683, "uuid": "4e3120fd-0236-4564-a9c0-8047dce21daa", "comment": "Malware payload (Mirai)", "value": "d7a7b855c05ef1b4680cb0a011cd6dc5331552953a90053af1341446b703f017", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716683, "uuid": "31a04c26-38e4-4224-a0b8-0b7f7c9cc9e1", "value": "T1E3C3B60E7E31DF6DF7A8823447F74B21A79933D626E1D684D19CE6011E6034E642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716683, "uuid": "99b60cd8-9cd4-4e3a-8333-42d460548b93", "value": "3072:hpiOGqfOTpHFv17d3GAh7XKtDsS4b77Mc97ytH:h1GqfOTpP1GAh7XKFI37z97ytH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716683, "uuid": "f246c09f-7ff3-421d-8696-58f4de67c87b", "value": 121824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716683, "uuid": "fcd4308f-28d2-4d27-9255-eb302422c767", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ff201f3-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773716743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716743, "uuid": "47b8d387-5e01-456d-9a4c-df4bf3cca7d5", "comment": "Malware payload (Mirai)", "value": "ea9bf26abce509b0bb5bcac6271597e2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716743, "uuid": "ace28698-d836-44f1-89e9-0d3c12e62805", "comment": "Malware payload (Mirai)", "value": "7ef8c472bc5ffc6e2cda2477e1e290f3786b79b35b4bc9e2b2dca3c4fb9e480c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716743, "uuid": "a9534a9c-a32b-4ed7-85b3-2b216e0dd363", "value": "T147A34ADAF400ED7DF80AD77B8493490AB271A3914A930B37732BBD57AD311A54827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716743, "uuid": "8f186d57-52b0-4c81-a8d7-b5ad9b368934", "value": "3072:XGMgAv3P9Y/KtTkJewSCCzy/ceBSFCS3CtDph7SwB:HgaV87oy/1BSASUph7SwB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773716743, "uuid": "9e80c552-ccd0-435c-99d3-bb1c448e6574", "value": 100900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716743, "uuid": "9d8cf270-7362-4000-b09e-d3759fdea7d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8b1ba92-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773717026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717026, "uuid": "09e0d3f3-dfdf-444a-a28f-fb23bc9a6c4c", "comment": "Malware payload (Mirai)", "value": "417c7ea303b74f5de1b9b6e5b0ed94fb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717026, "uuid": "4042b669-671a-4cf9-b4c6-8310a7377bbc", "comment": "Malware payload (Mirai)", "value": "0bcb9e3100066add48f38b3378003aa19dc8f2f6de9dbfb577d8f58fb4a61b87", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717026, "uuid": "d61b649f-29e1-4be2-b945-097328525cdd", "value": "T159933A55BC819A12C6C422BBFB6E428D371213A8D2EF7217DE255F2437C681F0EBB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717026, "uuid": "1dcbee27-152b-4416-aad2-ebdf769b3e09", "value": "1536:tYcRiKS5qnpJ3Ci5ZOqy593ox9RndDH6qxAN1Y5xS0hADDER7YpVoSOcvA5SwXQT:tYcsKgqnzSqyvCjdabYKgMDg7YrzwgCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773717026, "uuid": "313b9de6-e927-4782-b191-2ec88a9aa4a8", "value": 95372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717026, "uuid": "54d91ad1-d021-4d88-982d-90b491982fbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b63650cf-21b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773717828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717828, "uuid": "078d80ed-8b13-4e1e-bbe3-1a2f5e6f2a2b", "comment": "Malware payload (Mirai)", "value": "41bffe053992a032f5ab43048e683756", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717828, "uuid": "07fc7734-374e-40f3-9b55-c91e1b0f3083", "comment": "Malware payload (Mirai)", "value": "4504e4db7ea7eecee6321686e4bd963886c80735ef9fdb5c61139cc32d811623", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717828, "uuid": "a10874fd-27c0-4f1f-bdf8-97f4f87a34f8", "value": "T1B5833B02B71C0E47D1A75EB42A3F27E193EEE59021F4F749260F9B468276E32544AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717828, "uuid": "316ae605-727a-44c9-80e2-ad501537489c", "value": "1536:vDox2+9Wu8sIKWMZbUab9k7SMIL/sDjRQDTybobKC3:vmgJMFUab2EsHR/u3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773717828, "uuid": "e6c92e3e-939d-4ecb-a44f-bb91a44e0fd5", "value": 87280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717828, "uuid": "0c44f932-5410-40a3-a714-be71df98a3c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc733406-21b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773717892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717892, "uuid": "5430415b-50ce-44f7-9cbe-c346f75024ae", "comment": "Malware payload (Mirai)", "value": "45a842eb96a5100a78ea90a33ab2ee9c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717892, "uuid": "b32854d0-7d96-42b3-89b4-c85920822763", "comment": "Malware payload (Mirai)", "value": "e21a7984549ad0a41d20e68d7cca91ff3a00038f5d359884bbb3ac3b721d3ba5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717892, "uuid": "1acbf47c-e2bb-4a75-a012-46dfb717bfcc", "value": "T12DA32956BD819B11C5C012BAFE2E118E33131778E2DFB2229D249F2477C792B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717892, "uuid": "2142b19b-0810-4252-ac33-7a27b0596200", "value": "1536:axn2OQCbOBKAQQ8fQYaaGdBnFMRcM9aqcX5LLdOiC+bwqTG5DRHe37Yu5ZYeb:0QCq4AAR2hi9a5bwqTG5DRHe3EuzX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773717892, "uuid": "d9f85b76-e1c1-422e-9e07-e3725db43346", "value": 99468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717892, "uuid": "2622bfea-4f77-4720-b8c4-13b4e53037ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6d6897e-21b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773718258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718258, "uuid": "937a8b0c-7ae7-478b-841d-e2727a14bf4c", "comment": "Malware payload (Mirai)", "value": "68503eceb88091eccf5374bff7d79b30", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718258, "uuid": "ea24a1bc-a972-4262-9c7e-91656634f77a", "comment": "Malware payload (Mirai)", "value": "ae5c1c12099f7d63977ff39be9bf6d4f2ce56887c19e60c98e5cca9084bf0c62", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "8c6cd589-3919-4ecd-b811-1d3f5ca38bd3", "value": "T177343907A89480BAC4D6C2788FDEA126DA75F84CA134B21F27D57F263E58F20AF1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "8239b0c2-50f3-452b-a087-678b850ea594", "value": "3072:4Yte/Nn86/dX2dT5Zb+YWVg0b2xhZF+ahZ0GQGomuCe3cdC6CKLPIwDf3mfUD:GNnzRu5Zb+YEg/lyfsd3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773718258, "uuid": "c3df2825-d8df-4688-a038-da33f1b280e7", "value": 235592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "744daf81-7648-45a0-a84b-52184569b6bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6dbd51a-21b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773718258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718258, "uuid": "a3f92440-b5b3-4fe3-a9fc-60806afecdf5", "comment": "Malware payload (Mirai)", "value": "10668c2c880d8229c104daf616d91ec2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718258, "uuid": "cd4ed513-0f45-4989-8de2-4281c522ce9c", "comment": "Malware payload (Mirai)", "value": "d175a91d12915acc95372e2a4ef62b15b4dbce75fc3e02649fbee48602db427c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "75af87cc-8714-45bf-8d7b-f8238b4fb8a9", "value": "T10F935B32B9395D2BC4D4A43B21F34366F2F2474E31A88A1E7D710E8DBF24A502A577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "e8c792e5-c91a-494d-9294-84060dc117a3", "value": "1536:s4gbbjI/M18NBBLtnuwwBPoro5vqv64Nk5jQ7wpoJth0L3:ng3e1ExvY64NUmu3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773718258, "uuid": "1ee4df07-a87c-48f1-b4c4-401efa31fd2d", "value": 92676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718258, "uuid": "b3915e27-3f7a-4ed5-b058-86252d15750f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f2f401c-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773718889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718889, "uuid": "67711a44-f5ab-40fa-bc23-3cc36e354199", "comment": "Malware payload (Mirai)", "value": "f6ba18db55546565c6bfeb93fff0271a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718889, "uuid": "aafdc0db-f887-4900-a36a-268633b30430", "comment": "Malware payload (Mirai)", "value": "f0cff8b4a2ae62b125606d4fa5769a083649d33a34ec33e4ea245cd7a29e35d0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718889, "uuid": "b9a81ccb-5f05-496f-b0e6-d4870f3223ea", "value": "T10683AD73C8196D90C1584BB8B8F8CEB58763EC0092872EF65996C7B99047EACF5453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718889, "uuid": "15ffefb9-d135-44d2-a856-34d2720a0b3a", "value": "1536:BA3BcpVA9L71yC/prjPTGPLmaKBiXG7fb9hCjdyFvTxH7ypw:BSN8Sxom9B7f9hIc7B7yG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773718889, "uuid": "09abba7c-ebd6-49b2-ae11-85e48e7520a7", "value": 84308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773718889, "uuid": "562d7fd0-d7ba-46c2-86c6-446b0d828f18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0b24562-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773719187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719187, "uuid": "b50e1abf-7b72-470b-9ef6-3de9d40e3e08", "comment": "Malware payload (Mirai)", "value": "3a7a08b1db355a336316a61cb5b55322", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719187, "uuid": "9a7f79dd-e192-42d2-bd3c-7a9844471163", "comment": "Malware payload (Mirai)", "value": "0a8f2162946b785334c3d124cd0d00a90f284fe69b8d9f49c022f7120729e565", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719187, "uuid": "841c3a33-e654-4854-9390-bad396ab9945", "value": "T1C4935BDAF400ED7CF84AD77A44635A0AB531A3914A930B3BB267FD57BC310A54923E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719187, "uuid": "76c5abe7-ef92-428a-9e12-63ee89369175", "value": "1536:jdtKDAo1ZrDgwGpCmMwbVRmLuQSKl5XG5N+8r+yS6WKMsHCCwei1bPT3NJd9en+8:eUwGpCriV+lnXGLSyS6WwCCwb1Dfen+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773719187, "uuid": "31a71975-029c-4ccd-950e-5e08c015da13", "value": 94468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719187, "uuid": "e74e1237-644a-4b8a-935f-43f278bc6baa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97d2a79-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773728168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "213d0cd6-33f1-49fd-a49f-422cc7177925", "comment": "Malware payload", "value": "c57a8b40d2ca402656ff3d778f42708c", "object_relation": "md5", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "a6429973-528d-47bf-a324-543c0128f8ee", "comment": "Malware payload", "value": "60aa052dc1cad8a9f39983ffd6a21c97b43f3b9c8925ed1bac8113feaa07bf44", "object_relation": "sha256", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "fa4a3ccc-5d69-4f3b-805a-9dab2c0e01cb", "value": "T129518588676598AC3C802352FCFE446628EE001A777D1495D4EE8CE0903D3AF87729", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "d2d4ccd7-5dc7-4225-b860-0e5ccb95a499", "value": "48:faiT9KVXwwuABXqED4yV49ayLaUP+WuxeaMS99wktNT0AZqqYAr:fRT9hwuABXnDr/ZU2WuxeaMY9wktNnZV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773728168, "uuid": "9a0b0326-5a2a-478d-b588-bddb71926edb", "value": 2613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "42e6b512-e2c1-4e4a-b8e8-3b4a3b28cc50", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97ec590-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773728168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "024c1cd3-c9ba-447e-ae66-b1de5cd267cf", "comment": "Malware payload", "value": "655e5ebcffc3fa9a84d254f7d31c794e", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "uac-bypass", "colour": "#bcc615", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "11aeb18c-62ac-48b2-a564-5fd31eb6e80c", "comment": "Malware payload", "value": "f8a8da4bfc818d068b08fe1470b10bc529fe4cdc7039b153c352924c138f5136", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "uac-bypass", "colour": "#bcc615", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "413691ea-f3ed-4fe4-8888-8bd315e9d6f4", "value": "T1D8E06810E8E60969A6A9E66856453356F25BA3CF8230925262FC105920872CFD276A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "6232a68b-f95d-4e11-94c5-1e32f82858cf", "value": "6:hY7vj5t6qUEiWyidJ35O34zinLpy6mcPxEM3n66DM+Evj5t6qUEiUbT4dTDyLMro:ebbyid1e4ziLpVmWEM3/jEb6dTDZsJn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773728168, "uuid": "7f83c48e-e1f2-49d5-a670-563984408512", "value": 386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "e555503a-8431-41e3-b6eb-9fe489fdae0c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c98f0024-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773728168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "52310452-3492-4d54-885d-d094686abecf", "comment": "Malware payload", "value": "2689f58b803364bbfba2edb423a3b572", "object_relation": "md5", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "80a23358-4a6c-4855-9399-bf3a00b86f98", "comment": "Malware payload", "value": "e8879c41e383df2be62e3b5c6cb4c92f53a886913eb66d8f60ac071020d633dd", "object_relation": "sha256", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "3c3bb20b-0b71-41c8-9c9a-80a2eba58d1f", "value": "T1B691A38247109A5E6C611319DCF9C26768FF5089377A4918959CCCD0247836FCFA9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "33839ade-96dd-4fa9-ada9-dcee5a37e88f", "value": "96:HRT9WEF8XwEKxZU2GunaIYVktMcXz0kRDtMPq02CgUYbSlavzUZp:xJWtr2XnafVwXlrzUZp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773728168, "uuid": "1a27c8a8-766b-4421-bc5b-c140fdcd66ef", "value": 4298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "9ed36aae-651b-404d-87c3-68201554519a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c99d0b48-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773728168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "6ebf107d-8b49-4410-8ade-17c8c80a29b8", "comment": "Malware payload", "value": "552ca91696fedd387e1ea47f50f18344", "object_relation": "md5", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "e8733635-9026-472f-bb69-58d522d769ed", "comment": "Malware payload", "value": "d0e84b6bf4d810da9e177a54c397033b310864ede10eb9f9b7e6b2672daf23f5", "object_relation": "sha256", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "23b5283b-311c-4a3f-8c37-bc76ec6d75c8", "value": "T106115CBBB51AEC494A4FF890599B0923AC76E8A3536611C68075C6305CFF275E3373", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "2ee8891e-ac1f-4365-bd77-e6d7021b7e74", "value": "24:Nb18JkILHlc5HlcSLhUIlcLFY7JlcVIIlcL23t/2cTerY77lc4n:NaqhkKELYJqVAL2VTeOu4n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773728168, "uuid": "9fcd3fcb-e717-42af-8ed5-767efbb5f548", "value": 895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728168, "uuid": "d94fe466-4c61-435c-9853-8ce094ef6a2f", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef09b497-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773728231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728231, "uuid": "55640020-f551-4cd5-b1f6-18cd8bde19aa", "comment": "Malware payload", "value": "806fb7876b63ba89d2432cb831be01ba", "object_relation": "md5", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728231, "uuid": "834f97d2-faff-4c4f-94f5-47a48f37e66a", "comment": "Malware payload", "value": "4af2b83387e6ab3f4ec461150e1c6930c1d92ee4d5a7d8e39cd8a222127d9df1", "object_relation": "sha256", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728231, "uuid": "74e937c1-3fb5-4148-a42f-dacf40e1da24", "value": "T17231361CB3FAD99964922245DCF604DC2CAE007F627E51F6E69DC9A0102112F437EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728231, "uuid": "c1709ee5-48d4-4895-b35a-71d41cf88c76", "value": "48:HaiT9WhBoMahXwwuABdP50D4yVIsimAwlmf:HRT9SwuAB4Dr+YY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773728231, "uuid": "aa15762d-a3ac-4d43-912a-442237cb9722", "value": 1699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728231, "uuid": "1739c550-113a-4160-a451-6fd07727c8ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b44c375a-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Loda)", "timestamp": 1773729850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729850, "uuid": "ee001fe9-41e8-48a9-b97e-fb77b0058d4f", "comment": "Malware payload (Loda)", "value": "9de2302839c449544b36a64859fa5e9e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729850, "uuid": "ca194e79-e791-4f45-9816-032dd901ccf4", "comment": "Malware payload (Loda)", "value": "b0d148a8e8ca49fb0d52a19ef9ce44b611f060a51b5738c8a93f248974177bea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729850, "uuid": "f0f8c554-a364-49b2-a489-b91ff074cca8", "value": "T1E7C6335B2DD740EADC8118B08B27ABD723F361E989894C357AC6388D7991FB7702F4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729850, "uuid": "743ef57e-6eaf-4500-80c0-c7e144be0240", "value": "4bb2436b569f68911a870608bbdf4781", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729850, "uuid": "3280c2d4-0bbc-49a6-ae74-167c7106887a", "value": "196608:+7JNyO3JVvjYhVRwXjcVlvaozKMKRrlF8XEd5hTR6eAYrTp4SVbKLbuvxquRG9NF:+7TJbLYlVlv0M5w5jTtVAuVMso4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773729850, "uuid": "e852615e-d373-475b-a8c7-f07d56436c76", "value": 11967488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729850, "uuid": "1074c316-eae0-4261-917c-dada20d3d25f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9a2d215-21d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1773735550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735550, "uuid": "7f2c4aae-2aa2-42f4-b184-ab52e72b6ba6", "comment": "Malware payload (QuasarRAT)", "value": "3aa77930a55be80c8408ff4c75ce7189", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735550, "uuid": "c402cec9-eb4b-457d-87bf-c5fd22c08647", "comment": "Malware payload (QuasarRAT)", "value": "6c19dd42ee08ca3c027eb7e13476e16cdef1f458e2046463402822c22052d673", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735550, "uuid": "ae410975-6b2d-4c69-8cae-071d9ece4fbc", "value": "T1C81633592395E903C8A16FF41971D3B416F9DC99A426C3078FFAFCE7B93631A58001", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735550, "uuid": "4851d5b5-8ae7-4b68-9a80-c120e0873ce3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735550, "uuid": "c2c36495-f379-4e28-b2d4-7143fe52a20f", "value": "98304:Okc24jvRD0uLDHzMo7eiLvYvwkm9Q9dNmXyDFWAijbrStnc/oNq:ojvRDfLD4QBbQ9DmCYfjfcnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773735550, "uuid": "24e4eaa0-a526-48a4-bf0a-8e4fcffd72fa", "value": 4140040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735550, "uuid": "e0fcbdad-d120-4569-a528-5ae3956d4945", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e38097d6-21da-11f1-ba1a-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1773735942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735942, "uuid": "df5b1592-2e94-46cf-b9e1-53805800344b", "comment": "Malware payload (njrat)", "value": "1140fce94ff984f618925cad482627e2", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735942, "uuid": "e168e50a-17ae-47e8-80bc-0a103d8b3b19", "comment": "Malware payload (njrat)", "value": "721fabf8882149a7f63a59c8247d65b2551562ebf740c7db6b79e66b26a5054f", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735942, "uuid": "f7c0f460-2de7-4903-873c-c6b88d702c0c", "value": "T15E15F1497759ED43C5955FF458B0E37817B4AE98A811C3038FFAEDEBB52934638082", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735942, "uuid": "39b53fd5-c6f3-4fde-9e77-9eb4796b4140", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735942, "uuid": "80182361-28a0-40a9-a410-3bdfed97806f", "value": "12288:BwOBALZp7aiNfF/9pBtWZRTSqXUHPb9kh6Bx9Aungv/iEas60wCqQJ5eKiBciNB/:PSL3xT6ZB7sPZkgBrAugGse+JMciaC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773735942, "uuid": "2d698f83-d0ec-4fdf-8590-e0554ea36e98", "value": 877576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735942, "uuid": "28c6840c-6ae2-430a-96ba-15be2d1ddfd2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866dbb2f-cefb-11f0-bee4-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773736572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736572, "uuid": "ca00a421-a04e-4ea1-b452-5d9550ea6e25", "comment": "Malware payload (Mirai)", "value": "e3ca702505aa8cc3944e0bbfabdceb40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736572, "uuid": "360d2d3c-388e-4b9c-b55f-c928d5a2c690", "comment": "Malware payload (Mirai)", "value": "c78ca6ee275aec8ce7513d31c5332e1e7ad7742308d0ce3d70393aac4fc4ea26", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736572, "uuid": "e1b3f19e-66aa-46ca-b66b-448bb76d9301", "value": "T124D312ABCCBB89CEFE6A8FB52657094F0DF6E1D4E5843D98453B108027F8256A514F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736572, "uuid": "19f12807-c9d4-44a6-8884-00c902ab43f1", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6con:7O/QJHZweEL/NOjCHm7FZZnca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773736572, "uuid": "dce37816-5a18-49ea-ad33-a6cf33a7b340", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736572, "uuid": "e47f6a73-fa6a-4b42-bf9d-6b1ffc1c7969", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba33b1f-21de-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773737379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737379, "uuid": "48a26b22-f1a5-47d7-a601-f6e436b49014", "comment": "Malware payload", "value": "2a885a0455259d6b0ab02c35d9382a78", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737379, "uuid": "46a80cf3-6278-4f42-bda6-a231d412aa12", "comment": "Malware payload", "value": "8f872bfa62ae61dd6b9893dfac1fad1b8c8f14540069ad8f4c0179dc3d6a4829", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737379, "uuid": "504d8d83-aa1b-4d95-b258-cf64bb086dea", "value": "T1DC86335172C2FCB4C5E450B58B9EEF39BB0A19344B707A9F3EAD9B174F143A446A21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737379, "uuid": "724bbd2e-8f5a-43fb-b41a-ffaae42f764b", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737379, "uuid": "5b8c2aba-92e3-4c22-a00c-90aa04611226", "value": "196608:/CWTgq/QfVJL/T2pdGXYAIN6HCx+d2reUbda2v:1x/QfjT2zgMpxrrJd7v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773737379, "uuid": "f93bd231-1834-41ac-9f8b-7399fea4d68a", "value": 8586752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737379, "uuid": "c1de79b8-0122-482f-9d07-0a2abfefc24b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b635b4-21df-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773738045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738045, "uuid": "d6ba79c4-ea4e-4307-91e7-42f79475460c", "comment": "Malware payload (Mirai)", "value": "c7925e6bc1f9072849356e7fe573587b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738045, "uuid": "ed544e8a-903d-4979-ab7a-4b21d4bde206", "comment": "Malware payload (Mirai)", "value": "7e525ee0298f64817f7a0e84a31063ee4d76bd6a9cd884aea15cb2f2b4b62121", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738045, "uuid": "1ebaeb4e-421f-483f-b95e-3d1ab613deb5", "value": "T17B5161CA339606306F769EB7B2B50945B4A490A7A9C0D985E8FC3CF9924CE4E20D16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738045, "uuid": "670e1649-ee35-4fb2-a9ed-e8e7476619a0", "value": "12:JCkp0FNPiDeuKp0FNoDUh2Kp0FNZDl42Kp0FNdDpZKp0FNPDbdlKp0FNQexDQetg:ItUG33jpye+ejDJTOkahS37eXTpv7wNC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773738045, "uuid": "b3d8d4b1-1f3a-4ba5-a353-5d581f0be7f8", "value": 2794, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738045, "uuid": "78509704-d709-4979-8483-f9e274f8aea3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b7efed9-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773738211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738211, "uuid": "d5b3c02d-c462-4175-9bcf-074c2e57af51", "comment": "Malware payload", "value": "6236a77d3444bd4f44f8cfdc675562f3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738211, "uuid": "2cad3685-aacf-41f2-98df-10da86c91ca0", "comment": "Malware payload", "value": "9a232adbdd7041ce0a7f3cbf8500d09ef5cba8cd9dec0072f6e8624fad6120b9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738211, "uuid": "27d5f45d-0ddc-46f7-b7f7-e7b6e608d47d", "value": "T1B024DF4CCCC3352CC6D86B60D758A153EFBF4CCA0591F95E2AB9E1A7C138A52CB1B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738211, "uuid": "7cd1f09b-4f35-4818-a4af-e1e0d5040dc3", "value": "6144:uZ15/9iIpA972Mc9QgKeWk99cVz/8QZNeAGcXz7m:/972McnKo99E8QZNQuzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773738211, "uuid": "108f8b8d-f60d-4f37-b358-ef8154534656", "value": 213090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738211, "uuid": "497e38d6-cfa8-47af-a4b1-84f5922a3111", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "638806a8-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773738305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738305, "uuid": "22487e6d-db56-4044-986e-ae96210abf0d", "comment": "Malware payload (Vidar)", "value": "240863cf5aaa394c0f5620253e1d8e7a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738305, "uuid": "c80f6b50-8511-4702-b60c-bca79366171d", "comment": "Malware payload (Vidar)", "value": "ec8b00808d409aba38a31aa1511d874a4aab388d251eddae7ae3ff4183815b28", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738305, "uuid": "3c9c9134-2f1a-4776-98c9-f8da4c572dc8", "value": "T1CF855B0BBCD105BAC46A933689B662A37A75F80A0B3233D32F50A7783F767D05A757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738305, "uuid": "0e1af834-65cd-423b-9d79-6db52ea0a17c", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738305, "uuid": "dbbe169c-81db-4be8-acea-83cb9f8a30fb", "value": "24576:NDUgsJknM/yEC2x8QNZlV///3DRzOGiW2bNO:NDUnJkdE1zl1//TRz8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773738305, "uuid": "5e6521fc-9dae-496a-9049-055d438e090c", "value": 1798144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738305, "uuid": "c4f75989-8368-4160-a6ec-6f55888c0882", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29cd3964-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773741214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741214, "uuid": "b3a78280-2270-4b4f-a71c-4505700ab751", "comment": "Malware payload", "value": "a8f5a64f8108a43223223aa0131bd494", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741214, "uuid": "19ba2167-9236-4ab5-8074-6ce8553b8783", "comment": "Malware payload", "value": "df373ab7f6799ca6359f0d4e0bd988cbc6f9a7724e1c7b4c753ef85ab2aaf9c0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741214, "uuid": "ae873e24-4c63-4949-89a6-267845821203", "value": "T19334BDCB277349C7740FB7A547FD1BC60A183EAB7EA39A882D48E5D017276348939E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741214, "uuid": "b95c710c-a989-4a28-be9d-5ad1fa95a12a", "value": "6144:iVN2Xj/MpSWYLXG7+LXU1sNOyFphXTqNRAwizc:iVi/uYLXwSXUygqphujADc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773741214, "uuid": "8d73bf46-39c9-496d-9b14-bd1dd3b5e4d9", "value": 239692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741214, "uuid": "37665172-9469-4f4c-9e3c-c5ccab70f6aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773741619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741619, "uuid": "6e149db3-38f7-4300-8af8-d1fbc363baaa", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741619, "uuid": "5bbe5f27-e815-459e-b27e-3d5ed2bc5b1b", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741619, "uuid": "abb9bb4a-a069-4272-aca8-30fa676af8e8", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741619, "uuid": "f84dacc3-e856-49b9-b838-49dcf9292a21", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773741619, "uuid": "596a2b5c-9322-43f5-b5c4-4e46e028cae5", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773746899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746899, "uuid": "c6c30122-98b2-4754-ac97-002b203d713c", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746899, "uuid": "d977d701-7b19-4444-b2df-f267339a4f9d", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746899, "uuid": "3fab0273-ec54-49ed-a26d-c7a1755fc982", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746899, "uuid": "23314940-3044-495d-aea7-fb3eb6318ed6", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773746899, "uuid": "deceb96d-de30-4159-8e42-c86daba15ea0", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c14efce-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773746989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746989, "uuid": "74362c86-34e9-4c8b-9b06-e3c92694f638", "comment": "Malware payload", "value": "243c27e2018dde7c43d4aed63f790e16", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746989, "uuid": "5e547c06-efcd-490a-8f2d-313727dc7e13", "comment": "Malware payload", "value": "e34f875061fe9009f618ad7fa60c3e679d3d358d6308ff967c88829930bd81ea", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746989, "uuid": "9d5a0082-6276-4e56-8b39-6d680a64c8b4", "value": "T15DE02B8AC8E553A53183BA11589075951A5142CA15A18E8C318E7483DB48694D42F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746989, "uuid": "ca2ba73b-2f4c-4714-9407-71b08ada28e3", "value": "6:B8FQtJCc4svmo9cLjSG0y2sxAEdOqq8svcGHIqSGNMRZUFHbft9h1K3D:BMQtJOo9VxRsTdO0svcGtNQO7ft9yz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773746989, "uuid": "cc80995a-c7ba-4d84-919c-b2e0ba06f9c5", "value": 399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746989, "uuid": "a2850d45-9bbc-40c8-b1f4-858a8267b8f6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7248285-21fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1773750068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750068, "uuid": "2f374b48-49c3-4116-b02f-fd5847f8209a", "comment": "Malware payload (CoinMiner)", "value": "2debcb5eae48d69edb71f162091c6a00", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750068, "uuid": "fae74312-a2f7-4d54-b55a-c464bc88d87f", "comment": "Malware payload (CoinMiner)", "value": "12f81a9ba0f2a736fc73d5f856034e643d153665c58c02a33380d73d6944c8fa", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773750068, "uuid": "5d820136-cd73-4676-8bd9-cc43e4e07a2c", "value": "T1F5563356F040A435E038147A25ED48A2F07DBC714B36958BB3E93E712E353E9257EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773750068, "uuid": "2e510a8c-29c2-4e48-b8e6-4ebb5f0f8af4", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/Xnc:7veFb5X0f/o77MvcEyG7udlp7/Xc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773750068, "uuid": "d26f434b-7283-4e03-a914-ecd470eb125e", "value": 6233424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773750068, "uuid": "a3578e98-857c-4487-afc8-198e8d5ff043", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5438cec-1e51-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773754389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754389, "uuid": "b648b011-0ed4-4212-a3ac-664057a2a254", "comment": "Malware payload", "value": "0fbd83cab083fe0b047497f5c8d63f63", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754389, "uuid": "48c627ad-2ea7-4314-bc25-ff5e1aaad7c3", "comment": "Malware payload", "value": "b23f06a5bf75ae2335bac792574cb3bc5fdc11755f5f4a75617eb99fd3a56104", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754389, "uuid": "0dbaae0a-1d54-48a6-a8c7-1191f5319651", "value": "T1AFD58CDD098562E2C3FBB360C1B56E2E26B133239C67991B73FCA1D8CB512966D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754389, "uuid": "548a29c4-a123-492e-a127-08573fba1861", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGMPIUn7CsgelOa:8UixbItdTrJoFVPMvXGMwJsgelriBKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773754389, "uuid": "d25aef71-1a7e-4ba0-b5da-34e58ba2edae", "value": 2945189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754389, "uuid": "7174d59b-af4d-4739-8a40-d16c2f7bbe40", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8870bb0-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1773754392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754392, "uuid": "7e6ffb6c-0dcd-4deb-af2c-e4cdd3ad65c9", "comment": "Malware payload (NetSupport)", "value": "3aba858b8e1e02ee5ea2a2647c3c7347", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754392, "uuid": "94f3eddf-a24c-4f6f-b6a0-4d1f6d6a8733", "comment": "Malware payload (NetSupport)", "value": "c0f29ab0fe6f6912c8d059ece9872f8e98a4a905e4d66bba255bd0823595a1da", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754392, "uuid": "1dfc1bb8-cda9-4bf6-b96b-b39acf264c7f", "value": "T1B76533741FDA5BC0739A5C562D381BD96137FEAEB3DC89F42521138EB870522B86B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754392, "uuid": "33f2aa44-96af-4b62-a22a-d78e75d28563", "value": "24576:BTOW0RbPTi+ClTI4x4Uzl/c+5YLO2qw3S2jWUF6K/FSzfSBYFKWTB4+rTkXFKFeh:BTH0pxJQ4UzpcwYLd1lcyYfTFBT7r4V9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773754392, "uuid": "337d2f24-94fb-4a1a-b7b9-fe18c00fe8c8", "value": 1512160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754392, "uuid": "db17ef5d-eb51-452e-8c9c-33e7221d44e4", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1fa7f18-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1773754408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754408, "uuid": "2f63ffac-9ee4-4cb4-a86a-07dc0720800e", "comment": "Malware payload (GoToResolve)", "value": "f66b29be7d09ab619d20f505247e261b", "object_relation": "md5", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754408, "uuid": "c742b107-45fa-4693-9edf-6af906c127f0", "comment": "Malware payload (GoToResolve)", "value": "e9e7983ed2acb340195d5dfda778c68cbb02c114a434949a709c60e65c3c66e1", "object_relation": "sha256", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "e3dfd6e4-5190-4282-a2c4-defcd60166a4", "value": "T1043733207649C171F53E10B289286BBF427D6D320F6580DBB3DCFE9A5B312C16B36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "9fcee35f-82a2-4a6e-9d2a-0fe4396c6018", "value": "393216:ru0G/h3+M0v1UuQHRTRGH6JHfTF7UY+/kqFj4eFSmJlVvKneUdPlZQnl2H7gOnhI:S0GF+Mm1UuQ3H/T1uThFJll+eUdEnwHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773754408, "uuid": "fd5435bf-c1bb-4301-8e40-042675ab122f", "value": 24530944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "c5b8c7e0-e4f1-4193-a6da-5fc8fe0d6374", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2104b4a-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773754408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754408, "uuid": "6c7f34f5-a292-435c-ab84-29988d3cc04d", "comment": "Malware payload", "value": "04d67b56115366c47af32f1034477a39", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754408, "uuid": "080b309c-d3d4-42cc-bc22-a6ca635dbd4a", "comment": "Malware payload", "value": "315bf26fee67f2e1c94826352b79ca38ad20509256a8a31c90c72b6ac05c2f41", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "4a7b9582-f9fa-4bc9-b61f-69c7d8b9c1e8", "value": "T1AD383353B99A277FD2245E7EA0B9D7EC80320EB11A04814E752E3C591F7C5B630BB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "ae9bcff0-6364-4307-a27a-4ce8aae8639b", "value": "3145728:mxk9i4kK6HRnPUU5qnIrxLBip5yvb4hkiz:Kk9/kLxnPUUgIrxViWvbEDz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773754408, "uuid": "5818d467-4d4c-422a-a8a5-d50a96e5aafc", "value": 107589632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754408, "uuid": "1de41975-3c10-4633-b5d0-f3340d71f53c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "218ddb21-220c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773757092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757092, "uuid": "1a3b5614-b256-404c-ae13-12cca360baeb", "comment": "Malware payload", "value": "bfd8a279a1e4dd78eb7715258313d632", "object_relation": "md5", "Tag": [ { "name": "pw-6601", "colour": "#2ba93f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757092, "uuid": "adc19825-b1f7-4bbf-9267-7c243cf6a87d", "comment": "Malware payload", "value": "b72489a5c5f3d3c0360676531fdd03238c22da61f125366c5e9872352bf44df6", "object_relation": "sha256", "Tag": [ { "name": "pw-6601", "colour": "#2ba93f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757092, "uuid": "3aaab158-a624-4802-9347-74cb51af8895", "value": "T1F3A7330A23653866A4BB74682EE71D0DF6C45C6E5148FF3D0E3802FE7A1DBC9D9E91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757092, "uuid": "048219e3-378b-491b-afa9-8ac14eb19206", "value": "786432:z000lub0Mnls9TTJldT8qgf4RbYtd2ZC36o49NKRuDlaR8LV6g:iUb02ls9pzT8qUiZY639Nti5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773757092, "uuid": "267f5e9b-5f88-46a8-bbed-5e30fe167cab", "value": 45865150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757092, "uuid": "b3815d95-ff28-40cd-8852-6b987561fea9", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9345bb73-220d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773757712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757712, "uuid": "c2d7e98c-7af2-4442-81a9-95488dc99c61", "comment": "Malware payload", "value": "61b1facd805582e9693c27ca41cb27b3", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757712, "uuid": "e6880f6e-a093-4bb1-8f3b-eba4565bd609", "comment": "Malware payload", "value": "5bcfb668af32d8a0a92bd63f42c346b0a62cf19c82971bba3141e74365402d9b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757712, "uuid": "6aab7cf0-2b9f-479b-8983-5dec94a2af4b", "value": "T17C92CCA8EE34E703C3915D6063130AF52CE0C55478988C5E16796FEE93CB452E32F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757712, "uuid": "da92a35c-0448-4299-a1b1-ee3bba72fc88", "value": "192:ghtkQd+/1i1OiaYieIyVthpe1EdyDJPFn3hqnpITzhW5eIka:wtkQYNbelOqyDRFxqnyZU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773757712, "uuid": "f9fa5313-2bc4-4039-8baf-b740e475a221", "value": 21063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757712, "uuid": "9e421f4c-0d2c-4d29-bafe-bf40fc110fe6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ca32af-220f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773758466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758466, "uuid": "ac8990a5-2dd9-42c8-a3a8-3f7658f1b704", "comment": "Malware payload", "value": "5c90cdfcbf4106a77dd2cffdd084612d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758466, "uuid": "dfd06815-49e9-4345-8272-5739601dd511", "comment": "Malware payload", "value": "ba6d0aca918e45d2b4a7c648013ffd0b9604eb40642d26bac6ddf1b1b9fd4189", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773758466, "uuid": "afac811d-ad94-48b1-af14-6d8ff25dc75e", "value": "T13C8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773758466, "uuid": "752a477e-8d7b-48d5-b1c6-e21f4242e360", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnJWaBVN/:XEKltp9txAX/yr2pbJW0VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773758466, "uuid": "6b3e06c9-7e5f-4d2d-920a-a2f051944290", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773758466, "uuid": "231dbdfc-2d63-4dfe-94a4-96451c6015a2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf8ea171-2210-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773759075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759075, "uuid": "ef449c83-743e-4d67-9ae2-5d8cd8723541", "comment": "Malware payload", "value": "fe06681cab21268662a665eea7170087", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759075, "uuid": "05601e72-5397-40a4-8b2a-30d8b6ef4a46", "comment": "Malware payload", "value": "dddd67b08e1c5abbcc7ab65bc1b95bef59687e057555a3f1a626015c6f466331", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759075, "uuid": "5ca6baf4-fcdf-4245-96fa-0d5f407e22ce", "value": "T14A82D0D58E4A38B932F54109415A9D0507F828D7366F2F8C963B84F51FED2DA49877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759075, "uuid": "c48e8e6a-ff86-4bc0-911c-ffa1dbe936e7", "value": "384:5bRs1i4FlJchxEDgwl+Osb3okl5gVLqFJ2FZ1PNk+bj+puAWtlT:5bRB4FGhntgVLqqb1BT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773759075, "uuid": "014e6e70-f4fc-4d3f-b44c-a996ee68fed0", "value": 19200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759075, "uuid": "a0d2b83d-ef28-478e-af60-339a514ff57d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6ee85b1-2210-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773759141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759141, "uuid": "1c12e1f9-2aa9-4a5d-b1d9-070f5c9e4c1d", "comment": "Malware payload", "value": "fafca91adb87d6d73edec90f21713287", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759141, "uuid": "fb7c5c15-2a68-4798-82f0-06117c7efc6e", "comment": "Malware payload", "value": "3df182b2be4b3e0c52eb3caefb0517fc33c4c1edf5983b10095641364115d417", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759141, "uuid": "d7da942d-8ae1-4cbd-926f-73d14afdf574", "value": "T1D38733A94DE8B5052703362942FD330E39D988AF1153EA5CF500B46EAF78BA67FD9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759141, "uuid": "14a4c5ba-2035-4daf-9562-777d3a18456e", "value": "786432:y3fSGhP/cGn1xR0eEt+Gz33jVATDSLM+OihbFvkg/DFTTnavf9eb0K:MSg3vbRqt+GzDVED3SuwDFvUwB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773759141, "uuid": "8757a608-6857-49e7-b29c-1b65fe64317a", "value": 36623345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759141, "uuid": "3ccb5446-6def-47d6-9ab1-6b13fd435030", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05ae5bbb-2211-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773759193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759193, "uuid": "c7cb56be-2218-405b-8fa8-53bc22df00a6", "comment": "Malware payload", "value": "4cf06e60c668bd5fb0d3870038f4d204", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759193, "uuid": "afb906ec-56d2-43f9-867b-48a201f7dfc2", "comment": "Malware payload", "value": "97aa83cc32dd502d8b689f2d6e0c55e42ad096b3aa14e88eb96bc28beb7f70f5", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759193, "uuid": "3a367562-b4a2-4b55-9779-0e06d99fd06c", "value": "T130B6336FF7C04D70E4B3517AE1D9DB20686D2865C3BA73C32DA40F695A2C39E6A452", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759193, "uuid": "6f44bf40-6d3f-46dc-bdad-fc7e2cd0b756", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759193, "uuid": "f0cbad84-d61d-450f-8963-58167b46759e", "value": "196608:FsJkuSw194THMyIIA4qFsCzSV578BmSFUfdVhsyKMhEEY3IlHsRfxLwEh8EY:ikMtHFPOzwmSFqXsyKyXXHsUEY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773759193, "uuid": "f1ce7b51-1135-4d16-9cd3-4ab3b1a97935", "value": 11405312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759193, "uuid": "743d20b1-427d-42ab-b76b-d47fefe740f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f48fae0-2211-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773759209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759209, "uuid": "c865e5cb-9d41-4e1f-af29-0bba91e7260d", "comment": "Malware payload", "value": "ceeb494682d3143f2834b7b8379e6267", "object_relation": "md5", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759209, "uuid": "eb7d50c9-91c5-4b64-8cf2-cc4ddf0f7757", "comment": "Malware payload", "value": "e72c892b654f10b8449c55eeae37d7f87676da61d815463b13befc7f3ad9f5d1", "object_relation": "sha256", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759209, "uuid": "5720310e-cf56-44b6-b3b8-7d55f792a9f2", "value": "T1F6A733CDB1A2DE3627D8B813DD786D75358AAFD3D6342D00CB9A77A92031F86E4405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759209, "uuid": "1f56eb7c-af9d-428a-b7cc-4cc298086871", "value": "786432:zYZKcU7UlXN/B1f7fpdRKntdp5rNn8qLdrICCZ7ZlXKnRH7/U:z8a7ULf7fpvKntdTNn8qxhCZn6nRH78", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773759209, "uuid": "719b4a29-b781-4a30-8669-e15153a97d3b", "value": 46230750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759209, "uuid": "52792457-93ef-481e-a722-9708cf15db88", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e152f12-2212-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1773759663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759663, "uuid": "8fc4b12b-8a4d-4679-a35d-de1afd2b0326", "comment": "Malware payload (RemcosRAT)", "value": "d1c368185d7d90c660557379e3dbb803", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759663, "uuid": "dba1132e-3c9b-4362-97cf-696fffd8185a", "comment": "Malware payload (RemcosRAT)", "value": "0a186ec5124bf16e52ddb923d8aa4e16a54ab1156bd846b512e516619fa19532", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759663, "uuid": "cb2da224-fdce-4d82-9b17-5a9591c64664", "value": "T1D202533CC2E9BCD4475E72C079D6FBC1212ACF13AE6A1AA8F1C808810B4455DDBBD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759663, "uuid": "2266a20e-5c47-4c7c-b369-001e9c34ed83", "value": "192:2DBVsAW72hgqbdMrLqNaZcPD3fC7CH7drirZ8TKV22ztbYdtdu/t:2RW72hgqGLygcPD3fC6YrZ8TK9tbYrd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773759663, "uuid": "5530d9d7-24c0-4a3c-a266-7b58ae09da15", "value": 8682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759663, "uuid": "4ed848ca-1e5b-4851-b4fb-8a5d88c17718", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53fdb1b1-2213-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773760183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760183, "uuid": "1febbaaf-9d3e-43bd-9af6-2b5372ae6694", "comment": "Malware payload", "value": "3711f42cda1bab32481675355122719e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760183, "uuid": "4d8767c6-adb1-4376-973d-91ad04c0a1a1", "comment": "Malware payload", "value": "3d764b23768d7bef44ccc77d4eb6aa6c70fab909fff1ea7f98793332e2892675", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760183, "uuid": "e8037c42-5d0a-42be-9782-f0c2d0bb72e6", "value": "T17B5633884325BAFEF10940FDD5A1EE2ADEEB7F8E9E5685F0288390914C68533515CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760183, "uuid": "79c5a441-7299-446b-8796-a1a2eda87e41", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760183, "uuid": "5a4ead60-382d-476e-a3c7-b813f5c0b462", "value": "196608:GSjwznekZSt4DlKTBrT82MAlW9xSm/pBCPh/:GSjwjeKYTBro1Ag62pBCPh/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773760183, "uuid": "7bea7ced-7c44-4ff2-9a2b-5f7a0e741aa2", "value": 6305245, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760183, "uuid": "041bf26b-2632-48c2-8375-92fe057544c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1773760868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760868, "uuid": "4e986099-f291-446c-95c9-0f37cb13d925", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760868, "uuid": "4a2b6357-74ae-4d5d-871b-d75ea5720e5c", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760868, "uuid": "93695979-6508-43c6-a7ee-5d48c61ead0a", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760868, "uuid": "d3f594fd-0197-4bdb-990a-3ce79c7ed06c", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760868, "uuid": "91c4cb4c-a2b3-4807-bc75-357173683ca7", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773760868, "uuid": "12ca1cc7-9456-476f-a18e-02b4d3cd2101", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760868, "uuid": "e57f8601-f0ca-4f36-87b0-2d70156f1416", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2821875-2215-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773761200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761200, "uuid": "f9d5968c-bd09-4f50-9dd9-36ff50c501b3", "comment": "Malware payload", "value": "b64fd2b9794d2763e364f91668e313ff", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761200, "uuid": "94232629-5072-4d58-9161-cd4244ead8f0", "comment": "Malware payload", "value": "e9cb1effe6f7d4a5e97a5de88ba65afdf0149420c6acec4d21db6210ca89fa81", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761200, "uuid": "8c4f0e0d-ce24-4d90-8581-f7e47847529c", "value": "T119625336F14CEFF40B1E11D5428B6D0260546BA675368DEDB8CEC2987F2A7508FE68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761200, "uuid": "24225ade-c10a-49c2-a179-09ed878c1927", "value": "192:9ztN4D9PPjfy1HNOS2MVfxtWK+D1PiCyPkLfWnQVEs3Muxj1Z:SNb61HNh5tWKWPiC4kLfWHuh1Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773761200, "uuid": "ca162ead-c22f-4687-9102-50c750c2ebf4", "value": 15381, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761200, "uuid": "68d03485-9316-4c69-ba5c-dd11a8c3556d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4668cb5-2216-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1773761687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761687, "uuid": "da055671-d037-43a1-85d0-629cf1c1cf1d", "comment": "Malware payload (Fuery)", "value": "df57675a5d6cc317e216a9183035c080", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761687, "uuid": "906bdca7-294e-4cf8-b5b1-b417014f586c", "comment": "Malware payload (Fuery)", "value": "bef91f1e5dfeb2029ac4ec450cec86ef2208d41c3d7391e997873af5a7f56cc9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761687, "uuid": "38fb333a-0ed9-47d4-97eb-4b95c69d76e8", "value": "T15525F11933A9E942C5A16FF45D71E3B817B45E586811C303CEEAFDE7B929B0638442", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761687, "uuid": "8116de13-9b3f-4940-ab79-59db990e2582", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761687, "uuid": "ef485412-cd62-4801-b308-46120a31621c", "value": "12288:yiMBciNB6RJ+Y1I/iZ3xGh0Cn4ehcURnlQaa/u0l8knXzrpLOZNA19cuejZmkFww:BSciab+UI65CniUhlzZknXxOaeAix", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773761687, "uuid": "ba0b8f70-aa91-4ed3-b903-1deea5d4699e", "value": 1028096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761687, "uuid": "067b7aff-5478-491f-8036-954ad8fd4984", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95636909-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762011, "uuid": "4ec0fc77-ec5d-4569-bb9b-37365eb2f78c", "comment": "Malware payload", "value": "7988a0c3df84779875924239a36c6930", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762011, "uuid": "4782bb20-f112-4021-87e9-694c5cb63a74", "comment": "Malware payload", "value": "0d2c866063c947a5015a5b8ae64ac8ae0090f848a45585a62a9748f9d0142166", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762011, "uuid": "39f7deca-d87c-402d-b45d-b9b85ca6cce5", "value": "T1C2144D50B8D1A051CAEDCF2562DEED38C972DD7019A2F9457CB0FE182D2A1C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762011, "uuid": "91292b94-9b6d-4ee2-b4ef-8f8e5384e05b", "value": "1536:pgxgCPZR6pRjPse/zcMIKyqsCpqye5hY9M22H3/Vh6Fx7m3Lrc4K6s/:pQgCxkpu6N1e5hY9D2HPVAFlmvLK60", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762011, "uuid": "5227988a-d2bf-452a-b6db-5a0541451792", "value": 203637, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762011, "uuid": "fcce2188-c135-4fa8-9294-840c545e76e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7620dfb-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "e8d445f9-6913-45c0-a5ae-f60f2a3e560c", "comment": "Malware payload", "value": "709f6c9b11572d5bc9955c014a570c57", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "1fa0fabf-b0b5-40c0-be91-305bab64130a", "comment": "Malware payload", "value": "7abc0571f2c270f513bcc3dedc8bb08b13d0717f1fba012d09d147b4fef39a00", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "5c93b25f-a5f0-4ed3-b3c7-d961fc12fd1b", "value": "T12184B5F956275A9F411A0F25E50C0304ACECDDABE3E690F1DF0E4DB6AA5941848F1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "0aeff1f2-9ff2-4462-b643-802c755dc1d3", "value": "6144:WrZLZeLRNy7kbDVNgfsOFBNsEaw/VrmEQbzUFMtNErHz/wibvodBCvWI:WrNULRuaDv0BNjFmPzntN2/HSIT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762068, "uuid": "8030dbe2-4a8e-4561-898b-cb1f830e6fbc", "value": 397312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "3e916bd1-154c-4542-a53e-a42221c5c528", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b768d656-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "f18e0694-c2f1-43a8-a459-12fda0db4649", "comment": "Malware payload", "value": "f769f3f07adc19df03ef52f2c7b1a14e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "a4d33329-a5da-4384-9dbc-30fdca5157df", "comment": "Malware payload", "value": "fddc06afebfadbb36841b065d8cf7ccf47397a5ba0eb7dccc6824c4e119908e9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "23a75706-5148-43f8-9022-fe7cf83725a9", "value": "T132059FB25247DE5F932B0E44D0481A11EC5898937A7890F8FFC936D642F6258ADBDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "a6d0d220-6a99-4d02-a423-24cf4a39d722", "value": "12288:jRPKZVkLZ04jE4Q+Dj2pOfHeps1a7GH0Nzbf0tH0C/BYKogQHfNwZg2:jRQE04jE4Q+Dd2ps1aNbNC/hQHfqZg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762068, "uuid": "df04a99b-a884-40a4-8d46-5852f3a7f827", "value": 869036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762068, "uuid": "6bd653ad-21a2-48f1-af23-1c9a829bc981", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b83b921f-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762069, "uuid": "71104bb3-4ac4-4755-a78d-68bb6f0514a2", "comment": "Malware payload", "value": "5d06ca17e288b1e7a08d139b5de30688", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762069, "uuid": "2039c850-770a-4d16-bf05-5d370a3afc7f", "comment": "Malware payload", "value": "42958d30f3db4a6d1e727b8c2b32c8d3c5f46a744b9aaaf6c56341b54d2f7699", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762069, "uuid": "be0a6773-32c7-42cc-a137-0b9ff451f0c0", "value": "T1B984A5F956171E8F411A0F25E50C4304ACECED6BE3E691F1EF0E4DB6AA5941848B1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762069, "uuid": "5f3b008c-e93a-4ab2-99d7-1a726dab54e0", "value": "6144:Q/0v1jjENy7kbDVNgfsOFBNsEaw/VrmEQbzS3NJ/ydt2UqJveEc5P:Q/0v1jjEuaDv0BNjFmPzYNkwQ7B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762069, "uuid": "fd2abcc6-1c73-453a-bf10-780f75990ca8", "value": 398680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762069, "uuid": "23782d17-6a6a-4169-8a7d-8100340d8e31", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4814b9-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762188, "uuid": "000f72e1-ce98-4041-90f1-ef75413ba7ea", "comment": "Malware payload", "value": "1d81e69e9601eecdd2560de2003cace7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762188, "uuid": "56b81526-7315-423f-8051-ea546dd77af7", "comment": "Malware payload", "value": "26714ea9b11e26cfc15b3ebc4ff84ccf9c5fab1d9a1c037a60661a63d308c799", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762188, "uuid": "a2aea7d4-c99d-488b-b7b0-219365025b3e", "value": "T1ADF37E6F036518C0AD09E34C6494AEF060E6F0FAFBE6825432C45B6422ED69DDB5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762188, "uuid": "26743535-3be0-4929-b9da-05a079f1b3b3", "value": "1536:2OEiz99KeWPp70GcgPf19p7pmOlqykd+ovcQz7hp4an:2Olz9BWh70GhPf1jpLqJd+ovtvb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762188, "uuid": "29d7fc99-e2c9-48fa-9f00-905e32b39805", "value": 167894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762188, "uuid": "a183a874-f5bb-4748-bd3e-d06611a48612", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff7ab557-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1773762189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762189, "uuid": "1a056a6e-b07c-4ef0-a87e-1b86e4665227", "comment": "Malware payload (Formbook)", "value": "7ee7e73fad057e1e88526b93960be78b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762189, "uuid": "b74c69d8-ffc2-4a8c-9613-fd707490ad45", "comment": "Malware payload (Formbook)", "value": "7ea230a6b19fdc201c5aa3909223b9abc1efc254632920a9be725cb23140a391", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762189, "uuid": "f7e242cc-f788-4bb8-9026-724396a60523", "value": "T1268423348E4A4B3D9D2453F9105F858BBDA26E93A6DC70DE2DC5F0E852FD683E1384", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762189, "uuid": "609f166e-249c-4b64-8238-0776655173b7", "value": "6144:mgvoQDiEN/PgqMDfZ79CzPRUSRCQy2POWSqGFDRntOJHfctWCRLW7d25:mgQCB/PbM7Z5CzZcQbSdDt8J/ctWL7dG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762189, "uuid": "affb205f-8a31-457f-b087-f3e7d98b0536", "value": 380928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762189, "uuid": "a5f836b4-7fda-40ca-ab77-1d6ea8d4d65c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "219ee233-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1773762246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "6cf21ce3-f208-407f-b557-0b2cf9c6ca02", "comment": "Malware payload (njrat)", "value": "085ee6025cf34362132c770009831c6d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "603754a5-89bd-49b7-befb-2838f2d519a3", "comment": "Malware payload (njrat)", "value": "eff8a9f48e98e52609f75d9ab7baed6f695c2557b29a52f6df48a5f6232f0674", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "7a427876-7650-461f-99b0-a10918db0483", "value": "T16713D74CB694E174D5FF8BF1B4A2B2890B71A01BA902D30F99F154D94BB3EC09611E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "567cede9-047b-4ac4-abe7-fea3defd9573", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "452ef70d-6eca-4245-9140-e95ac8f3c784", "value": "384:sZycwwdsbhKIyKjnN9HnO8qEK7rez8Iij+ZsNO3PlpJKkkjh/TzF7pWnFEgreT0I:KrZiwFKjnNRnfY8uXQ/oIw+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762246, "uuid": "17e1b9d9-ffd4-404b-a763-9d9c6521eb7e", "value": 44032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "34280d9c-0960-4033-bd27-6bcb5f0ef78f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d11e03-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1773762246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "0e9da9cb-27f5-48a6-9cb2-7ccc586c44d0", "comment": "Malware payload (XWorm)", "value": "9753b1ef32d786d1786423bc60313059", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "a932b1f7-7ea2-440b-9009-94cdba7a81be", "comment": "Malware payload (XWorm)", "value": "facff271be2129b9df9b0b748918b3f15db650099803c087a0b0f19f2498d937", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "57c2d176-aa7f-46c4-9b56-7ada87ea488d", "value": "T19C44187EAF97AA41C4950836B92353814B798E75A0CFBA524EE37FFD5AF3CA404070", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "fd5abb7c-dd69-4390-852f-6831851d9971", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "ced69449-aca0-4483-a5cf-329ce9e32f41", "value": "3072:jFPb/JmdjV6OEaGz3Nsx6NJbjOSOslubo3BOoVm4NpVq8BxFRzaqF+o2GQJ7/Jz/:jFbij4nZBs4VOslubDgVqwlL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762246, "uuid": "253747e4-43f0-4ac6-8b1e-7adab744d66f", "value": 272896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "dfebbd73-0b1d-4901-bd57-5249ae6631fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21e70fe4-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1773762246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "48be4a9c-5799-45a3-b461-b32e89554ed2", "comment": "Malware payload (VenomRAT)", "value": "7dc1d0c57750ff4426f0dc1e887b99d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "8112239c-08fc-439b-a8d3-b18ff9c43065", "comment": "Malware payload (VenomRAT)", "value": "9100e92ceb94455d3159c4273b47a4d635f1d6b8add68e7c775e1849d3d1a9da", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "2967b193-e9a8-459b-8c20-e90728aa722a", "value": "T1DC834A013BD88859F2AD4B79ADF359060EF8E9236002DE5E3DC414CE6E77BC585076", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "d201f53c-0dd4-4861-82a4-14460b3564bc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "bb4c5a74-ecdc-4ff2-a6ad-303637bafe46", "value": "1536:WUxQcxHCapCtGPMVtk2taOILx1bW/gQBQzcJ90+4QVclN:WUOcxHCoeGPMVtkNDx1bWHQd+4KY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762246, "uuid": "9485d78d-9990-4e86-a06c-6cd06756996e", "value": 87040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "1e5314bf-dcf5-4284-8be8-78729014c76f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "905bf784-c52f-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "38163371-55da-44d9-b26a-91f5229050cd", "comment": "Malware payload", "value": "6f0f7ead13240789c83457a69ec70461", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "7f82f223-3cdc-4840-adde-ee09e8b72878", "comment": "Malware payload", "value": "2c3ec8df887b5d9f65017917554c23d41830be217e26757dcf45aaa0b96500f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "05962643-0fb5-414b-b9dd-717d4289154b", "value": "T1ADD35D1BF6A670FED16B8935C4420905EB727CB64B90ABDF47900EE60E576D08E3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "edad5171-4dcd-4720-9bfb-c79d39a4d77a", "value": "a78099e4259179fe3b92af03f16f0645", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "4eaa5829-c546-412d-917c-9b2474e023c7", "value": "3072:4thZQZlAVHNM2XmxyEGx1/QsEtlgIN8ER1:SQwNKEEYZINLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762246, "uuid": "74c70e66-f7a4-4424-92b3-fc9785927156", "value": 140800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "b546b4dc-099c-43bc-a31b-6fed014a9352", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21f6e273-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "1ca253eb-69ea-47cd-83e0-2e5f20e301ab", "comment": "Malware payload", "value": "4244ce78aeb4e1be2461cb909a4c7b9c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "bd9938a4-e90d-46a4-9f78-b8bfacd34720", "comment": "Malware payload", "value": "f9049c88f59b9cff456925330e20a99789f2ac9712d511d0829bd252267f7447", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "e0c0be60-0971-4ec8-ac61-1834b4ee35db", "value": "T1EDF44B30B240D03FE5F309B5A42D97AA611ABE3217A558C7B3C41F6E56B81D19E32F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "36e3a23c-5800-4acd-9fea-96f19052d463", "value": "b49abf9ac0d8ff78fc424d0e1b30e042", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "40c05dde-6ce7-4f1b-af96-923435a22308", "value": "12288:iSObJw4ZsJFJOiBJ71LrKsfUcCBaUalmrMJBAJF0NSvE5VNcQlyRlSR5AX:ipbJw40x98rZgJBAJF04sDNcsyRlSR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762246, "uuid": "95207624-9fe0-4854-ba8f-be215a9b73e0", "value": 785920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762246, "uuid": "bd48d858-9c22-433b-ab2e-0064fa3c3f5d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "222fffc9-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1773762247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762247, "uuid": "61d1fe82-15d4-4e1f-b015-9e361e4adcff", "comment": "Malware payload (QuasarRAT)", "value": "5af92feff889a60ee58e8d7c3f0fa8b5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762247, "uuid": "909e33f3-00f8-407f-8fbc-2526bb091f00", "comment": "Malware payload (QuasarRAT)", "value": "f2d933e38b04f9dfa1fe6ec8da498bbc380f65706fbfcae8e8abd2ab96745ef1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762247, "uuid": "07fc007d-e050-4ca6-9cfc-c83fe93e979b", "value": "T1B7E56B143BF85E27E1BBE277E5B0041267F0FC1AB363EB0B6581677A1C53B5098426", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762247, "uuid": "1c4d2cfd-6600-4985-b17b-370f914b5b0a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762247, "uuid": "196c0e36-7169-4253-9762-1040da1ad453", "value": "49152:+vIt62XlaSFNWPjljiFa2RoUYIarRJ62bR3LoGd5THHB72eh2NT:+vE62XlaSFNWPjljiFXRoUYIarRJ6w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762247, "uuid": "44e18556-220e-4923-b502-37c4d5ecec1c", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762247, "uuid": "1d88a116-34ec-4587-9827-c21c5332fffb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2823fb1-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1773762489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762489, "uuid": "9b19c193-fe00-4aae-a7e3-7640dc8f28e8", "comment": "Malware payload (XWorm)", "value": "c720ce3d2f77f2c7a40d128de3676bb8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762489, "uuid": "b5f8062e-9518-4d56-9933-bafacf9847ba", "comment": "Malware payload (XWorm)", "value": "729c6bd4073703ac65a1e4f918cefad5b214f418f09683b2796463a7ea2999ac", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762489, "uuid": "cd865ac5-0514-4e4a-bed1-a71b4d4a0516", "value": "T1C98595BE848428B5FEA069C51FC077958CDC17C7163BC07DB871ABA5AE49E9C8B640", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762489, "uuid": "854bfd9d-308e-4280-a0fc-b028d8c9f8a1", "value": "192:cKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK1:/iR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762489, "uuid": "d2cb0138-ad85-4225-aa65-78edb5939121", "value": 1738525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762489, "uuid": "0b05e10f-70d6-42ec-ba45-8e787e85a56e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3489cec-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762490, "uuid": "06ad0d8c-dd95-4647-a019-6e290499bc76", "comment": "Malware payload", "value": "945ffaa0e5129720438643a5618aac0e", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762490, "uuid": "79ce70ba-422b-4c75-a702-c372e4c62c82", "comment": "Malware payload", "value": "d0de65137193402d3b3a4b01068ed1a43a4b7ecdf6bcf3cb0684248ba9395ae6", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762490, "uuid": "d7dcbfea-2d30-4e1a-b805-880b984cb78e", "value": "T140D58CDD098562E2C3FBB360C1B56E2E26B133239C67991B73FCA1D8CB512966D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762490, "uuid": "f5b688ce-ea9e-4e38-8f16-08500b16e0a4", "value": "24576:8+EhkjiYLXR+bG/f2mtFfsqD+n0tkR5JoiVsgV+PYDlJBK3xrcGMPIUn7CsgelOa:8UiYbI27TGJos+PMeIGMwJsgelriBKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762490, "uuid": "f399bdaa-1e52-4568-8b9d-efdacd6b7193", "value": 2945174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762490, "uuid": "fc49cb1c-a352-4bfd-8f96-640aa85bb471", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b92c6f95-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762500, "uuid": "256109fd-b1ba-4dee-8c9f-466eef7e87f4", "comment": "Malware payload", "value": "80cf7193bc0184dcffeda3dc6eb108cc", "object_relation": "md5", "Tag": [ { "name": "pw-7701", "colour": "#0ed735", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762500, "uuid": "15e7ce16-ff86-4c81-90e0-9df753c22013", "comment": "Malware payload", "value": "27404b9497ad977254804aa11ec21786bf9e9024e34a0ba932a186a2aeebcb30", "object_relation": "sha256", "Tag": [ { "name": "pw-7701", "colour": "#0ed735", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762500, "uuid": "a33b8d60-85dd-4a0c-a8fc-9be03c64cd7c", "value": "T1E5A733024039351EC41F79DE1DE7DB209B231D19BE7B7D10AA238673C1A8AB717B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762500, "uuid": "534d89bd-041e-4f23-8cf6-b0abdf078db1", "value": "786432:NpVgROmlIP9rybAyOLAwQU0oGqeU7UBHqo6QDEiAE8ruKQUUIeE4fsm:sO6IP9raAyO8wheoUBKcDzXguKQLE4ff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762500, "uuid": "c4cc0850-5bff-4a4f-863d-0ba3469621d0", "value": 46163950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762500, "uuid": "b37ba122-e5ac-402e-9760-334aadb7cb5e", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02baa7a4-2219-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773762624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762624, "uuid": "4a62978e-86c2-48c8-b099-066a3f92d42e", "comment": "Malware payload", "value": "91f9edcef3af6e92a2e7785a00c0f3eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762624, "uuid": "16e5e403-c619-4286-a403-b9c4ae79a760", "comment": "Malware payload", "value": "a79d0b4e08babc0820a24ad033d6631c5e69f7d1c5e860eb27f8d31e958ea131", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762624, "uuid": "f51047ed-98da-4bd4-b3f3-56273d68ec39", "value": "T14693093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762624, "uuid": "849a675a-001b-4217-8a07-f051606958a2", "value": "1536:9myp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfiuEsCZKt6x:9fQI7zEStkbFv2v05x9krHEsCZu6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773762624, "uuid": "da656598-8d6f-4b92-b9af-085661719f1a", "value": 96306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762624, "uuid": "136e1e11-2011-4a22-8100-b6f9d8bf22c2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7316fbb7-221d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773764530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "25e45b31-e615-4850-8359-778f0e4fe407", "comment": "Malware payload", "value": "bec73dc587cbbca763153851f474954a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "92fed65c-bb6e-4577-92d7-aab3d0cc4351", "comment": "Malware payload", "value": "e833c46212055f8f8122ff16aae950f2d4e4887ab7772f6e67a77bddd1a6aaf5", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "689ef690-a23c-468b-b4be-8ea01b94e014", "value": "T12A663302E998A7257610E8252B4DE3FC1F748401D79A7DDE476A34CF8A81F54EBA4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "af8ce8d4-d200-4326-9dc5-5abdea81677f", "value": "196608:4zZGe/FnfJ50dq3OIZmIQ7PJJe5wYIzdw85RzYtD2:4zZGe/pJ5cq+IZDQ7xJeqYIrgy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773764530, "uuid": "748dfd90-364d-49b1-881c-ead4fb7b30ca", "value": 6829980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "f2a480c0-a7ee-403b-a208-ce1c32e55a1e", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7335072c-221d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773764530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "42d6a11c-1128-433e-99cd-827fc6d685a7", "comment": "Malware payload", "value": "31198beae40154b9e7093a5aa0bb760a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "1e08f80b-4b96-4076-a7b3-0e08f7c75ea4", "comment": "Malware payload", "value": "7c9d01e686d9cf696b8bb42992ca5a28db62230bdd1eccc56ba670552081d0e6", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "20cc410c-3bb2-4ff3-b371-e62606a79dff", "value": "T15B8633CB638A648EF7256FFA1A1D8E90D1A20E297201F652F50230D9B6EC05D37D8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "9329e2d9-939b-414e-9e9d-64c7acb2f43a", "value": "98304:rtmqh92OBdw3Y6OmF3HJPYFXLth2SgTCtpzCn+PrEt01g3zHP+tUMwi37F4dKMN/:hmqhhw3ks3OXLtISgTMWcblVjSKEWBju", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773764530, "uuid": "4438d00b-b067-4d85-ad66-e034891b35a2", "value": 8520142, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "e51777a0-9a48-4def-9c12-de4af41fc903", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "733d62bc-221d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773764530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "79689de1-e1b8-4a2b-94f2-c0910badc42e", "comment": "Malware payload", "value": "29086d9247fdf40452563c11b3dca394", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764530, "uuid": "67dab393-90f4-4260-ba76-9550aed25c02", "comment": "Malware payload", "value": "bb243113d236f823abd1839025190e763fe34c40da4949b77558995cc1a07625", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "355d71fe-eb60-4b40-8e00-a36897b0b396", "value": "T13E549E69F682C27BD0900230595EAB32F07EAB3533752987B3D49DA96DF0381F9056", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "d05763ca-dcf0-4aeb-8249-a66fd41f9cc9", "value": "32830753410fe7cd5aac9d37c9f93023", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "d452a786-023d-4642-a860-5714f1508c4a", "value": "6144:IrughCeBm7vbQlCwPakaBstCRvIX6kth2mbh7:IrlfQ7CsBkCRvI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773764530, "uuid": "587e3516-3cd1-4b0b-8eb1-8de5c321038d", "value": 300032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764530, "uuid": "c035dfc5-ea09-4296-9e6b-6b05f86e7177", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19dc43cf-221f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773765239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765239, "uuid": "87967017-38b6-4706-8018-0d399d35453b", "comment": "Malware payload", "value": "fd9e38e1799045d32bfba5ea6b6a60b3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765239, "uuid": "8047694c-2aaf-4eb7-85ef-12d3a7b958d7", "comment": "Malware payload", "value": "6d33f632c9b59f6a6839ee32cb613f5409aa7007785358e12c3e4f1c11f17fa3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765239, "uuid": "607eba4f-9203-4be1-88ed-fd0081930c3f", "value": "T11E96638FB2748613C8E262B5B20635727E2AD435479983B77CEDE435319F0BE4A728", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765239, "uuid": "5304496c-efb9-4627-b48d-f01702ce633d", "value": "2c1853915d316a65d08a8dc489aff101", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765239, "uuid": "437ec1ef-d82a-4726-bbeb-8471c46cd148", "value": "49152:T9DoEo71k3Q0H9ubngSsLxO9IWV0yJPePn6vE38Xnb/EQlce/gKSFd+RrYP1l8W+:s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773765239, "uuid": "227b766c-80d0-4afc-99ec-b8f5bf9f772a", "value": 9436160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765239, "uuid": "28fce45a-c9c0-4bd2-97c7-a4135e2a89e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bbe54e4-2222-11f1-ba1a-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1773766612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766612, "uuid": "d91fc6b5-46db-4472-9c88-412b4127dfb3", "comment": "Malware payload (PureHVNC)", "value": "d1992ddbd65fd431e55d16f71a848129", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766612, "uuid": "a1d7000e-bf69-4e32-a8da-3f891ccaac54", "comment": "Malware payload (PureHVNC)", "value": "363c13183a809554474b8286e02a0b62c6a864be56c40d134799a072fce87e88", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766612, "uuid": "1dd7c59b-8b91-4f3f-99a7-11b8d76b8d4c", "value": "T1F1D4AF7732674E22D2854373C1CB4E4197B99686B6A7F70E7181339A24063EFDE0A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766612, "uuid": "05475d2e-ddee-46f8-8da2-ad25d709df50", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766612, "uuid": "9ef38125-f36d-4549-b5b3-c71f1b7cd89c", "value": "12288:JkucQD8YRBgDqhq+9Mu4gqgtlJjtcXsLqM+koGZeEJT5+O:o4NBrP96ZkoGZeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773766612, "uuid": "a788e1f1-3d8c-4b88-9fbb-5920940f0bb4", "value": 643072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766612, "uuid": "c260f0e9-6c0f-48d1-a014-0cd48d1ec96e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf9ab440-2222-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773766833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766833, "uuid": "248bc44f-e09c-4280-9202-e76d466fda49", "comment": "Malware payload", "value": "a17a866ebf31ec0c2df784fb55b15873", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766833, "uuid": "a567b576-6fa6-4e84-91b7-08f037127726", "comment": "Malware payload", "value": "cff753b684ed47012476d3cd6e5341b863baa66077371bfd8c5e47413fcfe255", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766833, "uuid": "6b9e2ed2-626f-4374-91d0-0e09dcecf05e", "value": "T18C24232E77418506D9EBA1358BDC800E79C1EAA75BD525C634782710829CDEFE93FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766833, "uuid": "5fd21a76-54df-4029-abb8-5267c79ae84b", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766833, "uuid": "b5e40224-e87f-4a5b-a70b-c428357f0457", "value": "6144:+N5zWSPvTGbGaa8Ft6+BBVQJsIvtuWxHSMmczUV:YVnTGVIKSs+uUyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773766833, "uuid": "b40902fe-57e9-4337-9996-9d2dedaf5af1", "value": 225792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766833, "uuid": "d20b0316-0345-4790-9559-cc9b48fd214b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0386aef-2222-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773766834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766834, "uuid": "d6ba4f3e-2eb4-4476-8051-9f1ac042dede", "comment": "Malware payload", "value": "526a8e777dc1e4fe149bd22bc2c15f62", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766834, "uuid": "b13cb059-ff16-4471-9869-618b24dcd85f", "comment": "Malware payload", "value": "bcff2aa301ee01d32abd4352c2204cde6111270d2b4dd4f692f86b3128187ab9", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766834, "uuid": "b860914c-c75f-4e95-a864-075ef6a419b7", "value": "T1A866D5ABE25C817BD16A853AF4D28F00E8F360FD5B33EDF7215103589A8D9D49E7A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766834, "uuid": "7b2fd3fc-2b75-4bfd-b5b8-2eeccd1b2e87", "value": "8b6f55fd88c63427ceef4b1373e85158", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766834, "uuid": "107b90d6-d8a6-4681-80c8-4c2757e97f34", "value": "49152:Y8aONqtYd6NWUkxL6NjKedKQSlZK7kzHcAm3877D+FCg:80Px77D+Fb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773766834, "uuid": "21d424e3-5536-4583-adea-06901a85848a", "value": 7081472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766834, "uuid": "171d8af3-1b2f-4856-9b42-29105125ce44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5cc11c-2227-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773769057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769057, "uuid": "1dcf8eef-4041-404e-9401-187372f4881f", "comment": "Malware payload", "value": "2ff192cbf9dbf1bf7ee81987874d855c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769057, "uuid": "8c3eb2c3-61b8-4fa1-b79d-78eef1b885e8", "comment": "Malware payload", "value": "6c827d50eb8b4d1b3cad4ee7e6a752d8adf7aa367560e104edaa19ae40251989", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773769057, "uuid": "b55e2b02-0e7e-4d3a-9e76-2f5288abfbc8", "value": "T17F66336BF01928C6D866E575A1F22B91C7F0230EE983C436D2727AD4B2F738908DD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773769057, "uuid": "04ed7270-c10a-44a8-9935-df704393cacc", "value": "196608:CXU8YYlbHXUZZftmUdn2kPNqF9w0uU+HB/OGUElHq:cU8YYlbEZBldn2kPIYrU+h/PUElK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773769057, "uuid": "5e490a6c-b869-4f44-ae1b-c4caa60e3019", "value": 7067066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773769057, "uuid": "efa41df5-6fea-45e5-af00-d3d0028255af", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34a64694-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773777740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777740, "uuid": "4a1fd23d-452a-4070-95d3-8f24cbc5a300", "comment": "Malware payload (Mirai)", "value": "719283ef39c2ab9522f925ff863fb850", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777740, "uuid": "aadae740-d7dd-4633-bbff-8d495c9e911e", "comment": "Malware payload (Mirai)", "value": "3b5d8ab8a0e8335bf542bc9e7f7a79360b541c920263de8fa2deb6ea1def361d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777740, "uuid": "ea0121c5-e4de-4f9d-b0df-ced14dc3ac06", "value": "T190144D46DA814E13C0D6277ABAAF01893333A764D3DB730699286FB43F86B5E0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777740, "uuid": "5982eef3-9e23-4a33-aaed-82408bda2154", "value": "3072:cf+RGPANxpiEtL/1AMXYgSya14jJeaobWznDFD8Thm4F/q6c4kjnndM/9cZ31Q6v:BGPkzx7Ha14jJearzn589nFi6MjndM/0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773777740, "uuid": "a4f8496b-c221-41fa-bb37-f2702750dc5c", "value": 194617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777740, "uuid": "c4ba25ca-d0c1-412a-8ece-1d5d4897507f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "507b6a36-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773777786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777786, "uuid": "d826a3b3-ade0-4045-b171-c754a9c3a403", "comment": "Malware payload", "value": "60e1d7a1ab4431a574cdd12de042cd7d", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777786, "uuid": "834ab5a6-c450-464c-a75c-bb8e1a518d89", "comment": "Malware payload", "value": "f339905fa94730847ab70f14276501d81df52b2f4e2687a43738da63df548961", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777786, "uuid": "02880f82-f2b0-4b99-863c-77622f187e52", "value": "T16684FC7485FE0085E9CFC8241EBC7EBE14BE389787EB3625932CD771CF26A6225159", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777786, "uuid": "f6ee94aa-ec58-463e-b433-e79d015fe18d", "value": "3072:nvCuiCaO5ea8hqF4N5RjreiWunwE1ppiPkmAVSqwAgC:vHihq2/heit4qwAgC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773777786, "uuid": "6b2fb91a-075c-4e47-9239-7ae2314b97ef", "value": 386415, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777786, "uuid": "6633afc2-8409-4e68-bed1-c1b3172d2f81", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "758ac622-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773777849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777849, "uuid": "31944a32-7467-4443-a226-40c7c2906ecc", "comment": "Malware payload", "value": "f1c0d6e9403b03494e39c66b9661875a", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777849, "uuid": "cfe99413-fd2d-4593-b9ae-87c547a84d95", "comment": "Malware payload", "value": "0431191011ab2499a4a09b55b8044121944dd29f7ec233eeb68f2ce75b9ca167", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777849, "uuid": "b5bb34eb-d065-4d4b-af67-56279a1b9e05", "value": "T1B6444BB793177F9E1F652D84F50029462CBD7887C228A2E8FD8C49A2B1FDE98CD548", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777849, "uuid": "6c259a96-c919-45f5-ad40-f7e69d954360", "value": "6144:AP7z/hO9cRL0b2u4YofDMfxDDTBspItoQc54NP7YJX:AP//hw2u4Yu4fxGpICp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773777849, "uuid": "f2ddfa8a-e61f-4192-8f61-59be37cc36f8", "value": 257612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777849, "uuid": "26113e7c-aca9-461b-86df-1584f2380011", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfd3dd7b-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773777973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777973, "uuid": "720c4945-437a-4b84-9041-fbb1a9acbe38", "comment": "Malware payload", "value": "ddb33eb81f51e79e6553dcbf27d9745a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777973, "uuid": "84f47154-11b2-4d90-8f8d-e5afe3422314", "comment": "Malware payload", "value": "738c670d22ba36c8361681d59711716b71dc08fc7a998002ccc7e23428c53671", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777973, "uuid": "d09c8cae-4cfe-40cb-91e5-412f0cfb40c0", "value": "T1074151E1F971AC76291A4F3F9C8A0269778E05AB84322C10309FA8323B0C5585AEC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777973, "uuid": "a2d09878-ca48-4c2f-b585-4bf2416fc354", "value": "48:kdIpKr8mO7UZXPeQWw6uiprmuiRnDL3YEAPNo5M:CxO7UZXPeQWw61q9xAPie", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773777973, "uuid": "ff43fd8d-b841-4eb0-882d-7f19a1a218d8", "value": 2370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777973, "uuid": "6651da9c-8534-4074-ad85-07127c12d6ae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c38028f1-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773777979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777979, "uuid": "a3cfe292-8100-44b5-b39c-355a892c7321", "comment": "Malware payload", "value": "0b70f7f27bd8a8caf3f4875ff1f3b526", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777979, "uuid": "2d458f5a-7ca5-4614-a87a-019380045fce", "comment": "Malware payload", "value": "a90c03b8afa9865729afb43403585df18af4e73bdd499177bfd2ceccdcad1cd7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777979, "uuid": "a12a7e14-c0aa-451b-a246-c33f4c4fee20", "value": "T15321E3A1E2623C397916C35AB64E413C6387F9B31F696B01F4B07414216D99873E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777979, "uuid": "4c674c5f-c7ca-4140-bf39-fa12bf8f76fb", "value": "24:OyqMW0KEmrqT7rl7EJfGw8xdzWYWGwhyo2FM2wBbYPuJ+xAB:OyqMWVZk7VGfG/tWYWG5x2Dkc8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773777979, "uuid": "8769bd69-57be-45ae-bf26-5c0165173fab", "value": 1312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777979, "uuid": "60ed5947-ac3f-4db4-b887-15c49b62aedd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e49a7a64-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773778035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778035, "uuid": "f0dd0a67-f5fc-432e-9183-25cafd6248e5", "comment": "Malware payload", "value": "701564a3b413b4b1f54bd1f7cbcb9328", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778035, "uuid": "1bb9ae1e-76e8-434f-92b1-76067de2a993", "comment": "Malware payload", "value": "e2e210ebb947069c36ce3d6ba93c5e5a9289fd02589a16ce1d3a35587407cc08", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778035, "uuid": "cee53bce-9f17-4387-b976-f5fb01f0d428", "value": "T1614187E5F5706D3A716ECA28E24E12006EDB2B6304BD249490E7BD902E7E11C93A4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778035, "uuid": "e4ebd125-5988-44c9-81b1-31653b802429", "value": "24:7UjO/zSRQquLAkOG6ErnXkrmKCKwoCIN/p/AiQ7nHt0q5KJ0MLRJMu+uy5dA:aOLSR3yAkt/XkTVWNN0fLReCynA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773778035, "uuid": "81a400db-63f0-435a-820a-21462fbf5f40", "value": 2127, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778035, "uuid": "a96ebb47-3e4a-438a-bf00-228bcf17528c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7286b038-223d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773778273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "07af964f-6e09-4d4f-9928-17024955ff95", "comment": "Malware payload (Mirai)", "value": "1f10f11ca361a145b7f75eba3ce23fa5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "adf754b4-6c90-4664-90ba-b038a5e282f9", "comment": "Malware payload (Mirai)", "value": "76f9f2ceca29648448664c901a5de2432ed044f2056aa32aeaa3791cb5f9c4b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778273, "uuid": "2d83efee-f76b-4b6b-b1f2-baaf2017a0eb", "value": "T14C43F2359412E8E6E6204834F5FCD54E142D6F76EB3F21576294819C68BE186CFF8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778273, "uuid": "35381b38-f8d3-4cf1-8eaa-426e438b9320", "value": "1536:AurisSl3OVbY60zAWU1vKqurULyhRFeAfpU4iZBwUqI:ALAwqurULypBQBwUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773778273, "uuid": "cd36c2ba-6d3a-471e-9391-b0dcc6f7cf82", "value": 58016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778273, "uuid": "2f29b7d6-919f-4367-8494-a701644fe756", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01dfdf7f-223e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773778513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778513, "uuid": "2f06f65c-2658-4180-b207-f3c85349a05f", "comment": "Malware payload", "value": "9f086bba81bad723d4a541140e454d4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778513, "uuid": "e84ca73f-95e6-42fa-9002-cc15df4a5a1b", "comment": "Malware payload", "value": "38445968c429be59a7e64ea9f5c07f319dbc16e45bb709dcff448e8de73534df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778513, "uuid": "809ae3e3-18be-4ed3-926a-835672531b56", "value": "T123358D1AB2B2F67CD00BC0345BDBC6A14531F07569322D7F36C4DA352EA6DE52369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778513, "uuid": "9b539d68-f36a-45fd-b970-a0ca0d28eb05", "value": "24576:JB6e0NgrDqZahVa1SYA0HIRamMimTQRGWAqBC/:JBl0Ngr8ahVa1SYK910lq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773778513, "uuid": "6a33f97f-3aef-4d1f-abe0-d41a1aabd4ca", "value": 1144560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778513, "uuid": "013b3a2e-67f4-4acd-8673-0fc252524766", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d88bdbd-2242-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773780412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780412, "uuid": "d5cfefb1-da33-454d-8e60-82211bea0594", "comment": "Malware payload", "value": "075e3ed215d199554f4c03c6a271857f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780412, "uuid": "21c6a0cd-d9d5-44c1-a4e1-2ccc87f9fe51", "comment": "Malware payload", "value": "d231f2e9b254cfea0ed69e20c61a5f1766ce33d6184b32b8f688dc6339266dab", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780412, "uuid": "d82ed6a9-6d58-4023-b6ec-3d699639bef5", "value": "T13EB37789055A80F1DF5B3421468F4D17EFA8A0165B1DC3D2FFEEADA56F108B890FA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780412, "uuid": "8172760a-56e4-42b5-b066-962380e75c0a", "value": "3072:9555eJHbBxJU+esofvjoidcdpH6pD9PSFSopnc7B0JU3RY560lXVVzsvqRCzYqxG:MVVzsvWcS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773780412, "uuid": "ca2ad4f7-567b-46e9-a7e1-a578e5a826c1", "value": 112289, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780412, "uuid": "3c49e17d-90ad-4f80-b560-c2c7b6e8bcf9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705607, "uuid": "42546891-2194-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:52680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705667, "uuid": "662c87d6-2194-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://e9-trace-x.columnasol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705678, "uuid": "6c7d8502-2194-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.157:53392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773706027, "uuid": "3cbada97-2195-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://a2-ghost-v3.columnasol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773706446, "uuid": "360f2370-2196-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m5-vision-9.columnasol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773706635, "uuid": "a716b2b6-2196-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.210.194.175:39635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773707111, "uuid": "c2db6785-2197-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n4-bridge-z.fossaflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773707114, "uuid": "c44ab679-2197-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.70.52:60516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773707408, "uuid": "737022a8-2198-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0-scan-x8.fossaflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773707424, "uuid": "7d4c8832-2198-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.205.241:56295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773707767, "uuid": "49cd630a-2199-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k7-sync-v2.fossaflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708066, "uuid": "fbf21a3b-2199-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w1-rim-node.stratagrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708192, "uuid": "473af822-219a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:52680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708428, "uuid": "d3a75a74-219a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v4-zone-12.stratagrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708786, "uuid": "a8d0ec81-219b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://z0-field-x.stratagrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708788, "uuid": "aa82884c-219b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.70.52:60516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773708908, "uuid": "f19ad3f5-219b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.16.141:56409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709148, "uuid": "809b606c-219c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://x9-space-v5.stratagrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709386, "uuid": "0ecc9a86-219d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u2-orbit-z.muralis-tech.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709455, "uuid": "37b7e054-219d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.102.159:52762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709455, "uuid": "3818993d-219d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.57:49203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709568, "uuid": "7b138a7b-219d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:45212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709569, "uuid": "7bc9a322-219d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.11.122:55367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773709808, "uuid": "0a3c1f85-219e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://q7-base-99.muralis-tech.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710047, "uuid": "98714855-219e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r1-core-v3.muralis-tech.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710116, "uuid": "c1aa744b-219e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:45212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710116, "uuid": "c1b5dcff-219e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.172.168:36670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710410, "uuid": "70d2317c-219f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t4-link-x2.muralis-tech.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710595, "uuid": "df382f0e-219f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.11.122:55367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710710, "uuid": "23b8c965-21a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:59847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710767, "uuid": "458df307-21a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j8-web-infra.navispazio.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710895, "uuid": "91de317e-21a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:60885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773710956, "uuid": "b67cc34c-21a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.57:49203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711126, "uuid": "1bd56c5f-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f2-gate-v0.navispazio.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711247, "uuid": "63a737bb-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:59847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711429, "uuid": "d0397747-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s5-sync-x1.navispazio.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711493, "uuid": "f64c994e-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.70.90.108:51405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711552, "uuid": "19bc58c2-21a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.177:35354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773711848, "uuid": "c9dc9793-21a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0-main-v7.navispazio.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773712209, "uuid": "a16aebe6-21a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.70.90.108:51405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773712272, "uuid": "c6a49c81-21a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:60885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713167, "uuid": "dc662eda-21a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.177:35354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713234, "uuid": "040e7f88-21a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.250.218:46008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713653, "uuid": "fe09b048-21a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.212.138:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773713950, "uuid": "aefe5e93-21a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:49864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714254, "uuid": "643ccc32-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.224.122.202:47709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714547, "uuid": "13028b82-21a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.114.175:40761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773714669, "uuid": "5b77c7e4-21a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.250.218:46008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715328, "uuid": "e464be48-21aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.172.168:36670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715450, "uuid": "2d374857-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.106.179:43780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715516, "uuid": "54417a58-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.133.39:34520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715570, "uuid": "749d7d43-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://markterminal.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715929, "uuid": "4a7ff9f2-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cor46-layer.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773715986, "uuid": "6c998e82-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.197:48009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716288, "uuid": "2054ea58-21ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.114.175:40761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716766, "uuid": "3dbc33b9-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:52147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716767, "uuid": "3e2caf72-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.133.39:34520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773716768, "uuid": "3eab7728-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.255.131:34154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717137, "uuid": "1a85b187-21af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.218.255:38914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773717616, "uuid": "381c0268-21b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.58.96:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773718876, "uuid": "2709e341-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.221.6:42731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719048, "uuid": "8da77752-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yefa.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719226, "uuid": "f804d205-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.223.5:51730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719407, "uuid": "63e95274-21b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gust-exp.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719595, "uuid": "d38c51f3-21b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.21.121.71:34615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719645, "uuid": "f1c4ec02-21b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gjugxvg.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773719946, "uuid": "a5081df1-21b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1e4-point.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720096, "uuid": "fe88384b-21b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.87.147:47306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720436, "uuid": "c8d6426d-21b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.140:35843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720546, "uuid": "0a770029-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solvenum.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720614, "uuid": "333a8890-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.223.5:51730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720615, "uuid": "33843548-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.221.6:42731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773720910, "uuid": "e33d01b4-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://853rfm15.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721326, "uuid": "db8f63d8-21b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sales-path.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721514, "uuid": "4bb6789d-21b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.55:46156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721573, "uuid": "6ebd37c2-21b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.87.147:47306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721687, "uuid": "b2d6e14f-21b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:37712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721758, "uuid": "dd078b65-21b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.232.155:55013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773721986, "uuid": "65097251-21ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1d3-reach.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722110, "uuid": "aeadb831-21ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://banne4-frame.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722295, "uuid": "1cd7942b-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.232.155:55013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722466, "uuid": "832db888-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quortideex3.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722469, "uuid": "8477d891-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.184:40150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722660, "uuid": "f6744a24-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.146.87:47304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773722886, "uuid": "7d0fda96-21bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hfcn.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723308, "uuid": "78c80fe0-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5t0r-hold.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723367, "uuid": "9bb988f0-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:37712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723367, "uuid": "9bbda303-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:43304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723434, "uuid": "c4203699-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.5.12:47023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723495, "uuid": "e8806682-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.205.241:56295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723553, "uuid": "0af03783-21be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.173:38057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723666, "uuid": "4e68e265-21be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorven9is.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773723674, "uuid": "52d12340-21be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:46609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773724085, "uuid": "48276f08-21bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cour1e1-beam.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773724213, "uuid": "94035d86-21bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.140:35843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773724446, "uuid": "1f489471-21c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://3nsojlm.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773724869, "uuid": "1b0ed274-21c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ts2hfdf.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725107, "uuid": "a93f5e5a-21c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.173:38057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725174, "uuid": "d114d7f2-21c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:46609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725228, "uuid": "f10ded47-21c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:50987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725286, "uuid": "1400ed96-21c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crbn95bh.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725535, "uuid": "a87312a9-21c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.45.22:52047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725595, "uuid": "cbf2aa24-21c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:39915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725711, "uuid": "1110f29d-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://8vxgsoq9.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773725901, "uuid": "824248d9-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.68.79:54589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726067, "uuid": "e525cfb5-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ilve-vector.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726308, "uuid": "75185b8e-21c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.68.79:54589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726427, "uuid": "bc2ffd16-21c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clustercheck.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726488, "uuid": "e012d474-21c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.58.209:57622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726554, "uuid": "07b93be5-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:50987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726672, "uuid": "4dab6a08-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.33:50942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726787, "uuid": "92503b35-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.190.22.80:47632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726853, "uuid": "ba12a5af-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.5.12:47023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726908, "uuid": "dac87992-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeee.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773726975, "uuid": "027855d1-21c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.45.22:52047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773727332, "uuid": "d74574cf-21c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.240:50164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773727448, "uuid": "1c4422a2-21c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.58.209:57622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773727749, "uuid": "d024023f-21c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.184:40150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "c9cc2e7f-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=bypass.b", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "uac-bypass", "colour": "#bcc615", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "c9d71b62-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=bpersist.ps1", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "c9d8e61a-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/bb.php", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728168, "uuid": "c9ea88a2-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=scheduler-once", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728227, "uuid": "ec865ba0-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.209:47036/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728227, "uuid": "ec996f01-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.209:47036/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee5354b8-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:47600/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee6ea0fd-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:36415/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee88695a-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.49.31.147:54653/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee88ad97-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:50006/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee8f5f78-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/get-command.php", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "ee958dc1-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:50006/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "eebeadec-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.232.33:43626/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "eebf0486-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.232.33:43626/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728230, "uuid": "eed48752-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.69.113.172:40214/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728231, "uuid": "ef0dda48-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.200.78.153:19480/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728231, "uuid": "ef262238-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nelark.icu/xftaswx/res/post_proc.php?fpath=a.ps1", "Tag": [ { "name": "lnk-dropper", "colour": "#075f27", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728231, "uuid": "ef313312-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.74.168:38744/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728242, "uuid": "f581f27e-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.214:38963/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728242, "uuid": "f5865536-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.30:37377/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728242, "uuid": "f5b86be0-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.93.9.218/arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728242, "uuid": "f5ba84ce-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.117.168:47625/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728287, "uuid": "105c2968-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:36415/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728406, "uuid": "579085e1-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3cre-plate.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728410, "uuid": "59ed9e5f-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.99:53838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728411, "uuid": "5a63c0de-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.25.245:45423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728539, "uuid": "a6cffcb0-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:38657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728539, "uuid": "a6e8bcdf-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.240:50164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728590, "uuid": "c558cad1-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.16:59544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728713, "uuid": "0e2b1635-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.71:51895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728776, "uuid": "34485c33-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:38657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773728826, "uuid": "51f431d3-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gustfil.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729020, "uuid": "c5606647-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.68:52168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729075, "uuid": "e65e3e72-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.112.157:35503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729076, "uuid": "e6c79b27-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.158.142:41670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729246, "uuid": "4c183db9-21cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wu9h.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729309, "uuid": "7185c163-21cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.111.57:56765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729556, "uuid": "050b8639-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:39749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729606, "uuid": "22d5c321-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://assets.fxd-hz-tk-loop.in.net/vk_swiftshader_icd.json", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729670, "uuid": "48fb2fb1-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clinicpulse.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729735, "uuid": "6f97974e-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:35953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729850, "uuid": "b45494d2-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://sbstorage.club/HQWDTQ.vmp.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729913, "uuid": "d9d81e5c-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.71:51895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773729966, "uuid": "f91ea0f7-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zk370qhd.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730159, "uuid": "6c6b0ded-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.217.145:42028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730159, "uuid": "6c76a8de-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.234.36:35599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730211, "uuid": "8b559f57-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b9a9ec0ece343a68.brambleufer.ru/notebk-91267b64-989f-49b4-89b4-984e0154d4d5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730218, "uuid": "8f8a1b69-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.104.99:53838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730276, "uuid": "b211f317-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.112.157:35503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730458, "uuid": "1eaf7027-21ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.28.2:49846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730517, "uuid": "418f1933-21ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.16:59544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730746, "uuid": "ca51198c-21ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ette6-graph.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773730928, "uuid": "36ab2e9f-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://check-gate.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731122, "uuid": "aa46b834-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.37:40440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731178, "uuid": "cb86ec93-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.132.104:33650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731285, "uuid": "0b9f895f-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yefwc3t.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731538, "uuid": "a2645d0d-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.18.162:47725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731597, "uuid": "c544b158-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.234.36:35599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731646, "uuid": "e2d7e7cf-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trailertrue.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773731898, "uuid": "7901e25e-21d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.97:48670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732080, "uuid": "e547e6ca-21d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.68.41:34422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732141, "uuid": "09f7d731-21d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.217.145:42028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732307, "uuid": "6cbb4c5e-21d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:35953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732436, "uuid": "b9a85b89-21d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.132.104:33650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732497, "uuid": "ddf34233-21d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.68:52168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732609, "uuid": "20a287b0-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://format5-scope.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732677, "uuid": "493b3aef-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.35.219:44787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732847, "uuid": "ae7a17e8-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://58broegq.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732858, "uuid": "b53c4ec5-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.18.162:47725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773732860, "uuid": "b5fdcd92-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.60.139:46861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773733329, "uuid": "cdc07aed-21d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://videobiome.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773733392, "uuid": "f313c6dc-21d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.117.82:35777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773733627, "uuid": "7f88e3f2-21d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i08da.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773733871, "uuid": "10d43ec1-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.35.219:44787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773733930, "uuid": "33c88a7e-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.228.68.41:34422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773734046, "uuid": "795e3758-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://esjxi.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773734180, "uuid": "c8cb5156-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.137:33310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773734182, "uuid": "ca35c86a-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.243:41350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773734349, "uuid": "2d86ce07-21d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://notifi-vault.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773734766, "uuid": "264ac636-21d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcrest2en.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735188, "uuid": "21d3889e-21d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeh4rg.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735610, "uuid": "1d886f93-21da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr0wt4-layer.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735875, "uuid": "bb40bdf5-21da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.137:33310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773735925, "uuid": "d94fe71f-21da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.237.243:41350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736027, "uuid": "15c417d8-21db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tren-sai.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736166, "uuid": "68d1f803-21db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.0.136.205:36849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736391, "uuid": "eecbc903-21db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bloorn-bridge.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736474, "uuid": "205efdf2-21dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.60.139:46861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736572, "uuid": "5b0395f6-21dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.50.209:46320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773736807, "uuid": "e6fd0621-21dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ro4d-stream.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737001, "uuid": "5a613f99-21dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.0.136.205:36849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737060, "uuid": "7ddae044-21dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.117.82:35777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737064, "uuid": "80281a09-21dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.230.237:45372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737299, "uuid": "0c48df3b-21de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.46.93:34838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737409, "uuid": "4dce5feb-21de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.85.183.120:40874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737532, "uuid": "97152409-21de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticwin.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737647, "uuid": "db4ac496-21de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmcha.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737783, "uuid": "2c80025d-21df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.230.237:45372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737844, "uuid": "50fc3801-21df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.178.6:40441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773737949, "uuid": "8fd026bb-21df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yzkzwt.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738329, "uuid": "71eb7764-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.82.151:35154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738367, "uuid": "88d9c001-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://a08ulcab.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738628, "uuid": "241d6b1c-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.54:50115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738788, "uuid": "837a2508-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raibark.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738847, "uuid": "a6a81676-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.85.183.120:40874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773738932, "uuid": "d94cf9d0-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.23.69.144:33671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739207, "uuid": "7da5088c-21e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gcyryi.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739281, "uuid": "a96ee13f-21e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.178.6:40441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739566, "uuid": "532c1e4f-21e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://18z4.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739757, "uuid": "c52d4909-21e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:44285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739938, "uuid": "315a9bba-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.82.151:35154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739940, "uuid": "31fbeafb-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.151.207:54180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773739988, "uuid": "4efa514b-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://measurecircu.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740243, "uuid": "e6a9010c-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.238.128.82:50544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740358, "uuid": "2b5b9ddd-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.54:50115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740358, "uuid": "2b5cf583-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.23.69.144:33671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740408, "uuid": "48fdae38-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j40frzwa.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740709, "uuid": "fc732e3b-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rbvjsji.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740720, "uuid": "0311a490-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:60828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740720, "uuid": "0311bc8f-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:60828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740846, "uuid": "4e31c11e-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.140.101:35615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740900, "uuid": "6e48a2df-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.193:38333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773740959, "uuid": "91ba1325-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.81.83:37106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741186, "uuid": "18fe1acc-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://le4r-vector.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741249, "uuid": "3e9a2a15-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.81.83:37106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741548, "uuid": "f0bf427c-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://00adv0.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741619, "uuid": "1b180179-21e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.116:55917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741860, "uuid": "aab9ac38-21e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.86.69:57996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773741907, "uuid": "c6f7a01b-21e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pasturepow.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773742094, "uuid": "36601860-21e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.89.218:41521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773742521, "uuid": "34a577a7-21ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.193:38333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773742627, "uuid": "73b436b0-21ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://synt-sheet.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773742816, "uuid": "e46d9f05-21ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.158.155:51549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743059, "uuid": "7514b29e-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.86.69:57996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743109, "uuid": "9306b23b-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solmesha7.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743115, "uuid": "9694c944-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.130.154:51594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743177, "uuid": "bb7a4685-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.116:55917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743529, "uuid": "8d731e4a-21ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f41th8-spark.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743658, "uuid": "da5bc442-21ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.89.218:41521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773743958, "uuid": "8d417a70-21ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.67.71:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744186, "uuid": "1563dc9b-21ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6tojdb.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744261, "uuid": "41e8f3b4-21ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.106.179:43780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744367, "uuid": "80e21380-21ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://taldraor1.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744621, "uuid": "187938b0-21ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.140.101:35615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744727, "uuid": "57c6fd9c-21ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m3rge4-point.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773744968, "uuid": "e73641da-21ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.11.172.25:50021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745090, "uuid": "2fbfd1f5-21f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-lineal.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745271, "uuid": "9beaf8b9-21f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.67.71:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745567, "uuid": "4c27d08d-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://framsun.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745571, "uuid": "4eaabc4a-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.96.163.254:33407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745866, "uuid": "feb3a50a-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mujlhpe.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745882, "uuid": "07cebd41-21f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.138:33899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773745999, "uuid": "4dc23dab-21f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.5:59203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746240, "uuid": "dd9d9a4e-21f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.11.172.25:50021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746535, "uuid": "8d0527ab-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:55873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746585, "uuid": "ab01f053-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://castgrani.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746593, "uuid": "afd5e58c-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:55873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746720, "uuid": "fb439efb-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.221:45804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746766, "uuid": "172e05f1-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tinyruntime.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746899, "uuid": "65ee24a3-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.238.168:42364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773746899, "uuid": "65ee37a3-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.137.53:34032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747127, "uuid": "edebf8d3-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-draon.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747437, "uuid": "a6967f8d-21f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.238.168:42364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747489, "uuid": "c5be164e-21f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2dqe6hsl.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747557, "uuid": "ee88d2f4-21f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.138:33899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747621, "uuid": "146db925-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.5:59203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747621, "uuid": "14c4e822-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.81:60419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747634, "uuid": "1c7aaaff-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.233:56650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747678, "uuid": "36a20aac-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.208:57628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773747907, "uuid": "bee23f4d-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0rrn-core.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748106, "uuid": "3583ac7a-21f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.97.73:57669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748277, "uuid": "9bbe57cd-21f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.221:45804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748573, "uuid": "4bc4c870-21f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.70.32:33290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748689, "uuid": "91015d24-21f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.137.53:34032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748689, "uuid": "9105d0b6-21f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.154:43753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773748992, "uuid": "45f74bd6-21f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.229:39408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749118, "uuid": "908f9191-21f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.81:60419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749297, "uuid": "fb4b0c6d-21f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.97.73:57669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749310, "uuid": "038077e1-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.208:57628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749473, "uuid": "64a8db67-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.184.188:47946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749529, "uuid": "85b4f3be-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0rta-node.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749657, "uuid": "d250f821-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.12.92:42984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749723, "uuid": "f981e6de-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.210.244:34100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773749961, "uuid": "87256510-21fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.70.32:33290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750551, "uuid": "e6f289c9-21fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.194.154:43753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750621, "uuid": "10809304-21fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.178:43116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750804, "uuid": "7dedf40c-21fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.229:39408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773750978, "uuid": "e53bc141-21fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.184.188:47946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773751097, "uuid": "2c2d50c6-21fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.12.92:42984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773751276, "uuid": "974cb395-21fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.72:35282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773751450, "uuid": "feb12a19-21fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.210.244:34100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773751459, "uuid": "03f33467-21ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.177.26:39447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773751747, "uuid": "b0134482-21ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://routcha.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773752237, "uuid": "d3dce6de-2200-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.178:43116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773752350, "uuid": "174c584f-2201-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:50737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773752839, "uuid": "3af45175-2202-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.181:42222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773752949, "uuid": "7c4608a4-2202-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kp1vwn9m.lakebit.digital/?=check&&actmn=fUCEFKrvdLSrQfdw", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753187, "uuid": "0a06fede-2203-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stac5-signal.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753246, "uuid": "2d6a6314-2203-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://57ntnp6h.lakebit.digital/?=check&&actmn=TKZAacWVBcmoPsdP", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753320, "uuid": "59160678-2203-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.111.57:56765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753501, "uuid": "c51c401d-2203-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.170:40829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753864, "uuid": "9d75f5ae-2204-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.53.189:42889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773753922, "uuid": "c023ecf8-2204-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:50737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754385, "uuid": "d4733ad9-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/man-rgb/jpeg/refs/heads/main/MSIconfigs.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754386, "uuid": "d49638ca-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://res.cloudinary.com/dupkwncfh/image/upload/v1773379890/optimized_MSI_bmsp8d.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754386, "uuid": "d4964f3a-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://bakhtov.com.ua/images/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754386, "uuid": "d5006f69-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bnsbackend.mydevsystems.com/redirect", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754387, "uuid": "d529d97b-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://rbcoeconsulting.com/wp-content/plugins/pretty-manager/captcha.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754387, "uuid": "d539e626-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bkg-fix.com/myapp.7z", "Tag": [ { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754387, "uuid": "d53f0920-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://weblive.tv/wait", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754388, "uuid": "d623aa53-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnsbackend.mydevsystems.com/redirect", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754389, "uuid": "d66901e1-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kloudtechnology.in/step", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754389, "uuid": "d6a70529-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeid7kfr3qmhawhsbjllvuw3dqn2bui7rspqc6dctrypplwrmrp6mda/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754390, "uuid": "d73e84c5-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/5h9hwpknqlaqd1xzrlgu3/optimized_MSI.png?rlkey=1s9l0t6hnyy4xycnfkcwy1e32&dl=0", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754390, "uuid": "d753ea37-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dzptvoj1b/image/upload/v1773339102/MSI_PRO_with_b64_wavpuj.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754390, "uuid": "d75beaf9-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.wildskreen.shop/MSI_175244.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754390, "uuid": "d77093b7-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dn6bpc2yo/image/upload/v1773640942/optimized_MSI_eheqzz.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754392, "uuid": "d848a669-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeid7kfr3qmhawhsbjllvuw3dqn2bui7rspqc6dctrypplwrmrp6mda", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754392, "uuid": "d8654d3c-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://funducci.org/challenge.", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754392, "uuid": "d898dace-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://payables-notification.com/SvOjCPew/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754393, "uuid": "d8d94d26-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crixup.com/downloads/cleanRumbtimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754393, "uuid": "d8dc5d1b-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.wildskreen.shop/MSI_063445.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754393, "uuid": "d8df0a34-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://bkng-updt.com/at.7z", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754393, "uuid": "d9181979-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://beckupfinal.online/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754394, "uuid": "d976ab86-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://glhoteles.com/myapp.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754402, "uuid": "de4bb55b-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://happyglamper.ro/wp-content/plugins/mammoth-custom-for/captcha.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754409, "uuid": "e249f0fe-2205-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.62.197.232:7000/LogMeInResolve_Unattended.msi", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754507, "uuid": "1ca1e0b0-2206-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bkg-fix.com/at.7z", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754809, "uuid": "d09afd91-2206-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-reg1st.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773754989, "uuid": "3beea404-2207-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-sc4r1.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773755059, "uuid": "6632e20f-2207-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.170:40829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773755070, "uuid": "6c90a1ac-2207-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.231.231:48718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773755118, "uuid": "88fc9393-2207-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:44625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773755356, "uuid": "16f882f2-2208-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.53.189:42889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773755589, "uuid": "a19c6e34-2208-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1ien-forge.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773756253, "uuid": "2d612c44-220a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:44625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773756980, "uuid": "de9ef06a-220b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.75.76.23:55690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757102, "uuid": "277ef7d5-220c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.75.76.23:55690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757287, "uuid": "95e5ff45-220c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.231.231:48718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757389, "uuid": "d2ddddea-220c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.35:37915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757460, "uuid": "fce0fac3-220c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.68.72:59891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757521, "uuid": "21a31b4c-220d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.62:52235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773757824, "uuid": "d5fcfa8b-220d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.250:43361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758302, "uuid": "f2ccd28e-220e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.161.138:51640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758649, "uuid": "c1f91b57-220f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.250:43361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758650, "uuid": "c20a68c4-220f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.114:52958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758899, "uuid": "56b487b0-2210-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.62:52235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773758905, "uuid": "5a7708ff-2210-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:44103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759009, "uuid": "98509bce-2210-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://spring8-branch.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759309, "uuid": "4b608cf1-2211-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr3nd-plate.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759562, "uuid": "e19aff64-2211-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.114.46:37740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759609, "uuid": "fdf4c3cb-2211-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6klywpf.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759739, "uuid": "4b2ad929-2212-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.181:42222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773759798, "uuid": "6e7aee60-2212-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.161.138:51640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760221, "uuid": "6ae50b44-2213-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.208:56327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760267, "uuid": "860416ed-2213-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tridraar2.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760397, "uuid": "d37a25ad-2213-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:44103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760586, "uuid": "44884939-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.208:56327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760589, "uuid": "45ff3fae-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.114.46:37740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760627, "uuid": "5cd2b198-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8574065846/HPlEReH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760631, "uuid": "5f302e3c-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rizvexeno.ws/%D0%92ootstap%D1%80%D0%B5%D0%B3Ul.zip", "Tag": [ { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760760, "uuid": "ac231457-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagecopy0956.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760868, "uuid": "ec547276-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/fillyex/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773760870, "uuid": "ed99d123-2214-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/fillyex/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761048, "uuid": "576fab4b-2215-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/labenty/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761052, "uuid": "5a199e80-2215-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/labenty/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761600, "uuid": "a08cccc4-2216-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.40:36940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761827, "uuid": "27c1a4f6-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qpml0.cokefun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761841, "uuid": "301603ca-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.186.36:45251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773761841, "uuid": "3028ac32-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.47.114:52958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762011, "uuid": "95a1c502-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/mis-archivos-2026-4b0c7.firebasestorage.app/o/class.txt?alt=media&token=f1fda03a-6259-44d8-9bfc-013db5668695", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "b76dd559-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/cryprodaaa.txt?inline=fal", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762068, "uuid": "b776a265-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/base64_purelog.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762069, "uuid": "b84edaf7-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/base64.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762070, "uuid": "b90f4a1d-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/risuyhksadjd-group/risuyhksadjd-project/-/raw/main/cryprodaaa.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762189, "uuid": "ff75d1ea-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/mis-archivos-2026-4b0c7.firebasestorage.app/o/tumfuf.txt?alt=media&token=1fcca767-bf37-4570-9a19-e24cdf9ba210", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762189, "uuid": "ffa6080d-2217-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/SV%2FPrince%20Denrik.txt?alt=media&token=a161f2b0-9ad8-4d6e-a621-ea9f4a944d6a", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "21c1ecbd-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/n743.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "21dd2668-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/x834.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "21f01345-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/v38438.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "21f868a3-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/UniversalBrowser.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762246, "uuid": "21fc9c7c-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/s287.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762247, "uuid": "22358487-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.24/q8348.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762366, "uuid": "69597a95-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-draa.jokerun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762427, "uuid": "8d5e9db6-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.69/1000mgofpotassiumaday/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "potassium", "colour": "#7dd237", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762438, "uuid": "9453ca7c-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.194.200:52589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762489, "uuid": "b2989577-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alzapdigoo.net/bkp/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762490, "uuid": "b35626f1-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alzaptop.online/MSI_084537.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762551, "uuid": "d7a6e01a-2218-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.230.88/1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762907, "uuid": "abaa5335-2219-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jhh0yt.highjoke.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762926, "uuid": "b7102d50-2219-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.183.37:45183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773762972, "uuid": "d2486ecb-2219-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.243.86:58352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773763156, "uuid": "40524bda-221a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.40:36940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773763637, "uuid": "5ea22352-221b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.174:55516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764121, "uuid": "7f22c137-221c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.231.120:34028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764229, "uuid": "bfac4f31-221c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.243.86:58352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764359, "uuid": "0cfbd897-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.67.243:41637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764469, "uuid": "4ed5e7ce-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.183.37:45183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764531, "uuid": "735c7615-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aviator-chek.online/firewall/gfdvxcvn.rar", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764531, "uuid": "7380dc7c-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aviator-chek.online/firewall/FileArchiver.rar", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764531, "uuid": "739141dc-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aviator-chek.online/firewall/driver.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773764660, "uuid": "c0771bb3-221d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.138.219:34258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765020, "uuid": "96fce1b3-221e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.67.243:41637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765487, "uuid": "ad918b50-221f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverins.tempink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765667, "uuid": "18adddfe-2220-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4gen-switch.tempink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773765971, "uuid": "cdc52fc5-2220-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-ed1t.tempiso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766157, "uuid": "3d1b5d64-2221-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8180653200/gDNCxUR.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766327, "uuid": "a2389dae-2221-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5c4r-trail.tempiso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766344, "uuid": "ac23ba71-2221-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.194.200:52589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766686, "uuid": "78176f17-2222-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://royalmonitor.tempiso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773766945, "uuid": "126c4df7-2223-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.158.234:34778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773767046, "uuid": "4eff152e-2223-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zentide0on.tempiso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773767242, "uuid": "c37921ad-2223-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:35466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773767601, "uuid": "999282a8-2224-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.47.68:55835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773767646, "uuid": "b492355e-2224-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://golsec.inksky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773767710, "uuid": "da8cb141-2224-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.46.93:34838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773768127, "uuid": "d2f4f135-2225-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-t1ny.inksky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773768267, "uuid": "26486270-2226-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.96:45613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773768546, "uuid": "ccae944a-2226-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d15p6-cast.inksky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773768983, "uuid": "d119d7e7-2227-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.96:45613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769026, "uuid": "eb03b6d7-2227-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelvenis7.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769337, "uuid": "a43edf49-2228-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.158.234:34778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769570, "uuid": "2efe2ca8-2229-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://urb4n-gate.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769580, "uuid": "35226b5c-2229-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.231.120:34028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773769822, "uuid": "c53fa8d0-2229-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.238.128.82:50544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773770345, "uuid": "fd31a691-222a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://02kbny.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773770358, "uuid": "04adbcb2-222b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:58671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773770526, "uuid": "68fd4add-222b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://circuitpublis.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773770655, "uuid": "b5dd48de-222b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:35466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773770891, "uuid": "4250210b-222c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-phase.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771079, "uuid": "b284bb84-222c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.198.170:45950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771307, "uuid": "3a490050-222d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4utu6-forge.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771441, "uuid": "8a4b0c0a-222d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.22.249:52748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771617, "uuid": "f34054a0-222d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:58671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771740, "uuid": "3c598c59-222e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.211:47872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771791, "uuid": "5ae8b836-222e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.87.112.128:47907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773771848, "uuid": "7cb452ed-222e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://eyw3w.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773772219, "uuid": "5a1fd1f9-222f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.211:47872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773772267, "uuid": "767d1372-222f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://compdark.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773772346, "uuid": "a5a1717d-222f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.67:48366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773772746, "uuid": "943de1cf-2230-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://biomefocus.saltball.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773227, "uuid": "b2d00e8f-2231-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://truemeasur.saltball.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773374, "uuid": "0aa9dd35-2232-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uc450c98c4c09a1c00cf0340baec.dl.dropboxusercontent.com/cd/0/get/C8228at75u6tc2NC4O1EiWEWiXIq_rbgv7DSoBYHJji9JfYoqnvtLUGyUlOu_rnrg8bUDGvyVWeD8sFmbsmc6deHFwWltU7lgILgJz_FIS2YT-ODkOk_6KD_sPP7iftikz7vFh74lDk2l422c1g87lD7PsAfvskbEGew1aIU3ytNtA/file?dl=1#", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773467, "uuid": "41e841fc-2232-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.216:57784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773828, "uuid": "193ae9d1-2233-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.140.232.162:36937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773896, "uuid": "41ca31c9-2233-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.76.67:48366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773773947, "uuid": "603fa1d3-2233-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-5car1et.saltball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773774127, "uuid": "cb6d821f-2233-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-tra.saltball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773774546, "uuid": "c50a76be-2234-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://26u4.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773774799, "uuid": "5ba75496-2235-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.220.73:59477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773774920, "uuid": "a3c3162f-2235-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.150:47048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775091, "uuid": "09bfee80-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:38626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775152, "uuid": "2e696e21-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/8pr95K9.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775159, "uuid": "3275979f-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.144:52774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "52243f5e-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/1MstuFfwhCXulrI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "522465cd-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/mOv9lSkDu5BYI3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "522538a0-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/cwpj9HGq8KjAUVTU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "522920ca-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/zGA6GUqtaiYtKV", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "522bdb75-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/N9OXfQc1EvrvIymQ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "5231c735-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/nN5oWS8MHN04Ygt", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "5238e7f6-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/F3yJCc1PmcByE3DUNEqZ5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "524c7a2e-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/rHSgIuc6bWCRNhnI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "52520e60-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/D6B8YmcOcvmdInZ7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775212, "uuid": "52523d0c-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/aPG03YviN7x46", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775213, "uuid": "52612572-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/FZXSOupfc3xz", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775271, "uuid": "755ea116-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/7lmqyBAjov9oMU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775333, "uuid": "9a6f6c1d-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/O2KseZ2Rs2kK4F", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775386, "uuid": "b9f56d24-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://klvkpw.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775399, "uuid": "c16e8e23-2236-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.140.232.162:36937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775567, "uuid": "256e80e6-2237-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sertideex1.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775808, "uuid": "b585c302-2237-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.145:55513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773775927, "uuid": "fbf78419-2237-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://znnyfo.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773776417, "uuid": "208aea2d-2239-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.150:47048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773776466, "uuid": "3dc3d708-2239-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cedarclient.slowcube.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773776888, "uuid": "38e481bc-223a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://launchprocess.slowcube.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773776897, "uuid": "3e9ed707-223a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:38626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773776954, "uuid": "607279db-223a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.173:40150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777307, "uuid": "32fe3d68-223b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1609tkt.slowcube.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777740, "uuid": "34b1a137-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spof1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777785, "uuid": "4fbd50f8-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.b642", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777786, "uuid": "508ce721-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.hex", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777787, "uuid": "50b7c830-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gat3wa-craft.slowcube.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777787, "uuid": "510e5783-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.b64", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777798, "uuid": "57861724-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.145:55513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777849, "uuid": "759d8034-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.base64", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777973, "uuid": "bfdc3096-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/za.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773777979, "uuid": "c3913a6b-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/sa.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778035, "uuid": "e4a0f0ba-223c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/vps.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778209, "uuid": "4c2aa5b3-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://openpure.catflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72c0ff4d-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72c602a0-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72c6f67c-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72c9908d-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72c9f57a-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778273, "uuid": "72cd635f-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778274, "uuid": "72d93e63-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778338, "uuid": "9963dc29-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:38850/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778338, "uuid": "9965d466-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778338, "uuid": "99660661-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778338, "uuid": "996607da-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778397, "uuid": "bc8535ce-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778456, "uuid": "dfc8be97-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.43/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778459, "uuid": "e143717f-223d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.234.175:41505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778514, "uuid": "0207b4af-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/android_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778690, "uuid": "6b5d566b-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nmgixmc.catflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bbf5031-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bc98de0-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.ppc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bc9a4dc-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bce95e0-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bcea07e-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778691, "uuid": "6bd7be30-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6bff5cc6-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.164:47661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c000223-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c834e64-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c8372bf-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c888364-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c8989ba-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778692, "uuid": "6c89b4cb-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778696, "uuid": "6ea7fa49-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778696, "uuid": "6ea83efd-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778696, "uuid": "6eacd979-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/Dior.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778760, "uuid": "94e6aa2c-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/OwO.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778824, "uuid": "bac108a9-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.229.17.114/bins.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773778867, "uuid": "d44a9f21-223e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://norcore4ex.catflow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779227, "uuid": "aae6865e-223f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://banne-shi.catflow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779240, "uuid": "b2fe9db5-223f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.144:52774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779541, "uuid": "661e3fa3-2240-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.113.101:56565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779646, "uuid": "a4cbfd05-2240-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://riv3-node.catflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779886, "uuid": "341cb36c-2241-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://delive-crest.catflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779900, "uuid": "3c622e3a-2241-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.234.175:41505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773779962, "uuid": "6141e461-2241-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.110.96:45178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780246, "uuid": "0a9a7b35-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nqsl.catflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780257, "uuid": "11263028-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.232:56342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780258, "uuid": "116541d3-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.38.164:47661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780309, "uuid": "305f39d7-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/OdI5Py/Client.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780310, "uuid": "3060eead-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780310, "uuid": "3061176c-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780310, "uuid": "30624626-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780310, "uuid": "3063e61d-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/nhFRAN/interac.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780310, "uuid": "3072fd46-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/OdI5Py/Client.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780313, "uuid": "32b5883c-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780314, "uuid": "32fd2417-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/XmZtgu/Client.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780320, "uuid": "3682491b-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/kSYMP4/MEGO-BAT.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780321, "uuid": "372b3bba-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/OdI5Py/Client.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780368, "uuid": "53895943-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/interac-viewer.bat", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53b7466d-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/mego2.bat", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53b7d7fd-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/interac.bat", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53bee2b8-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/nhFRAN/interac.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53bf1c1f-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/XmZtgu/Client.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53c6d638-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/XmZtgu/Client.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53cdebf3-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/33.bat", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53d08642-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/mego200.bat", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53d3fa27-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/mego.bat", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53d5c1a5-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/DBopwb/MEGO-BAT.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780369, "uuid": "53d5ee31-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.233.71.230/EN/Exe/nhFRAN/interac.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780426, "uuid": "75cad307-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://156.233.71.230/Interac_e-transfer.bat", "Tag": [ { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780608, "uuid": "e22cc9c1-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://petalcra.catflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780622, "uuid": "eaadbe14-2242-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.72:34536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773780907, "uuid": "948f49ff-2243-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nordraal4.ratflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781161, "uuid": "2b9f48d9-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.113.101:56565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781267, "uuid": "6b12786c-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tiny-stack.ratflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781267, "uuid": "6b3e3990-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/3.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781267, "uuid": "6b551588-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/Security.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6b7b826d-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/1.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6b803634-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/2.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6b9f33e4-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/Security.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6b9fc52a-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash2/refs/heads/main/payment.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6ba224e6-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/Graphics.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6ba6a32f-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/SecurityHealthSystry.exe", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781268, "uuid": "6ba70e24-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/slash/refs/heads/main/Graphics.ico", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781269, "uuid": "6c0fba9b-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/moyousry95/test/refs/heads/main/test.bat", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781281, "uuid": "734ac4ca-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.72:34536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e646819-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/6.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e6763e3-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/4.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e6ea144-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/9.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e758f5b-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/5.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e79a2df-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/8.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e827b61-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/7.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781326, "uuid": "8e89436c-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/10.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781387, "uuid": "b2a348e0-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/14.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781387, "uuid": "b2a8d40e-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/12.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781387, "uuid": "b2affe4c-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/11.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781387, "uuid": "b2b7b475-2244-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/13.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781567, "uuid": "1db554f8-2245-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qxff.ratflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781588, "uuid": "2a2009a8-2245-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:51031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781926, "uuid": "f3d86dca-2245-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cultur3-array.ratflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773781996, "uuid": "1d89a93b-2246-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:59572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773782181, "uuid": "8bb88f55-2246-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.232:56342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773782240, "uuid": "af53d359-2246-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.194.79:52527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773782303, "uuid": "d486be9f-2246-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:54572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783080, "uuid": "a38e61ff-2248-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.194.79:52527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783249, "uuid": "087ee9fa-2249-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynlineal3.yellglass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783430, "uuid": "740ed093-2249-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://driver-tru.yellglass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783431, "uuid": "74d83036-2249-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:51031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783560, "uuid": "c1de16e7-2249-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:54572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783727, "uuid": "25544ea3-224a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quordra5a.yellglass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773783866, "uuid": "78688daf-224a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:48697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773784031, "uuid": "da44d0c1-224a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1rch0-route.yellglass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773784568, "uuid": "1a91cc88-224c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.186.100:34206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785045, "uuid": "3734c88b-224d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w3-sync-v99.versicodex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785226, "uuid": "a2dd4293-224d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k5-dist-z07.versicodex.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785299, "uuid": "ce7050a0-224d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.186.100:34206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785587, "uuid": "7a44ad92-224e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m2-infra-b4.versicodex.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785598, "uuid": "806b9603-224e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:48697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785766, "uuid": "e4fc746f-224e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7776573655/JHNYcS3.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773785887, "uuid": "2c8a9a94-224f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v0-srv-q82.amplitudo-v.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773786247, "uuid": "0340fb8e-2250-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://z6-app-h11.amplitudo-v.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773786608, "uuid": "da6df0f8-2250-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://x4-web-p09.amplitudo-v.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773786858, "uuid": "6fa802ac-2251-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.193:53567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773786908, "uuid": "8d64c0cd-2251-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1-core-j3.amplitudo-v.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1a9d832-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/BKDqqlGsf5dk0IrwZVgB", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1a9ebc7-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/RsFtwTTsYv34xStYDnjN63iD", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1aa2495-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/fKlK05Fc24ZNucvNh2mhBC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1abb2e7-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/q98WAmCazAkPXc3wGh3DFHO", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b2a304-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/jHlAwTINQWl0vqvfmfPTPWYM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b7e8e8-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/Wl1od1VJR3WquMjE", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b8e1ec-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/EIy6BAYzYWv0jhNo6oSuvG2Q", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b8ed7d-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/EGeWczeqnEXTMUhzwSnhcgz", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b91d2b-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/KweOhS08huYPY94Qpd9bz", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1b927bd-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/CJ5YYyumIO0jZ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787398, "uuid": "b1bdf004-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/B3XOHsUWebhjBm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787399, "uuid": "b1cc7711-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/pIP5soqMaST8B1IQK51Pn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787399, "uuid": "b1d8eae7-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/sifFBrHc.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787512, "uuid": "f55dec32-2252-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.105.142/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787637, "uuid": "3fe82bd1-2253-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.236.7:43128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773787686, "uuid": "5d59c206-2253-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/IeEGYOrPIHEg8WmroKfsCF", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773788116, "uuid": "5d5fdb79-2254-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.193:53567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773788409, "uuid": "0c20ca18-2255-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://id-x992-node.fluxovivavo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773788767, "uuid": "e1629264-2255-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v1-sync-h07.fluxovivavo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789133, "uuid": "bb977f07-2256-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.202:53561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789186, "uuid": "db26a83e-2256-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-k4-meta.fluxovivavo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789427, "uuid": "6abf73c5-2257-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://infra-z0-static.fluxovivavo.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789608, "uuid": "d6c8fee5-2257-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.236.7:43128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789738, "uuid": "2473b28f-2258-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.190.75:39072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773789853, "uuid": "68cd0136-2258-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.157.69.173:33377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790217, "uuid": "41dba7c3-2259-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.148.143:60396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790333, "uuid": "86ead4bb-2259-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.213:60794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790388, "uuid": "a7ec4059-2259-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://api-r8-remote.veloxfundo.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790567, "uuid": "127c7e14-225a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-t44-host.veloxfundo.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790809, "uuid": "a2536e6f-225a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-v7-entry.veloxfundo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790990, "uuid": "0e487cb4-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://net-d8-global.optimumvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773790998, "uuid": "13723408-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.202:53561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791058, "uuid": "36c0054d-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.213:60794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791114, "uuid": "588f645b-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.47.212:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791117, "uuid": "5a28618e-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.230:41715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791167, "uuid": "77e3ef90-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-f4-infra.optimumvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791178, "uuid": "7e3f1605-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.190.75:39072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791357, "uuid": "e963c2d3-225b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.175:53482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791418, "uuid": "0d891c26-225c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.157.69.173:33377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791526, "uuid": "4dd45293-225c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://db-g7-point.optimumvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791886, "uuid": "2445e2e2-225d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth-l9-user.optimumvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773791898, "uuid": "2be77ea6-225d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.197.134:53792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741544, "uuid": "ee79def4-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "00adv0.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773770343, "uuid": "fc24aaba-222a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "02kbny.inkpit.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757807, "uuid": "cbb8de3d-220d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.230.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757506, "uuid": "183ac9ec-220d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.42.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757385, "uuid": "d0441309-220c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.201.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773720064, "uuid": "eb48ba78-21b5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.87.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773720425, "uuid": "c2a0e253-21b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773714244, "uuid": "5e7d0365-21a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.224.122.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729305, "uuid": "6f71322c-21cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.111.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773756965, "uuid": "d60e7cfd-220b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.75.76.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773747605, "uuid": "0b263a26-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.151.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740884, "uuid": "653ba286-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.161.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773767585, "uuid": "8fc64d9a-2224-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.47.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745984, "uuid": "44e981a7-21f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.30.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791884, "uuid": "2332064c-225d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.197.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773774784, "uuid": "52f26b6e-2235-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.220.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773733384, "uuid": "eea88c0f-21d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.117.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773753485, "uuid": "bbb10f25-2203-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.51.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729006, "uuid": "bd51b665-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.55.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791106, "uuid": "53db4895-225b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.91.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773709565, "uuid": "791657e5-219d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.11.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773722465, "uuid": "8272fe4f-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.120.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773731164, "uuid": "c371eca2-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.132.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773790207, "uuid": "3bbc01ff-2259-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.148.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773768245, "uuid": "198572ba-2226-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.24.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773751445, "uuid": "fbceb79d-21fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.177.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773732665, "uuid": "424bbf03-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.35.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773726665, "uuid": "49ba3744-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.140.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737044, "uuid": "743e214a-21dd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.230.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773748085, "uuid": "28ef39d1-21f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.97.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773757445, "uuid": "f40b32bd-220c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.68.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773747605, "uuid": "0b25fbed-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.227.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773717606, "uuid": "322a3bc9-21b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.58.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec4b9abb-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.200.78.153", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773734165, "uuid": "c0075bc9-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.237.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713644, "uuid": "f8b696f7-21a6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.212.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773732065, "uuid": "dc735142-21d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.228.68.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740225, "uuid": "dc080fd3-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.238.128.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773789845, "uuid": "640c6ddb-2258-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.157.69.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec4a329b-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.193.74.168", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773771724, "uuid": "333a0c2f-222e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.230.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773730145, "uuid": "63e9940f-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.234.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773723424, "uuid": "be1bd49b-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.5.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773775145, "uuid": "29e75b95-2236-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.230.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740824, "uuid": "415705dc-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.140.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773730145, "uuid": "63ea3518-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.217.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773725524, "uuid": "a1d73c69-21c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.45.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778445, "uuid": "d8e0d031-223d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.179.234.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773755045, "uuid": "5d587274-2207-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.231.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766925, "uuid": "067fe96c-2223-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.158.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762905, "uuid": "aaabf1fe-2219-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.183.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773774905, "uuid": "9b04c8ac-2235-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.227.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780306, "uuid": "2e5af931-2242-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.233.71.230", "Tag": [ { "name": "156-233-71-230", "colour": "#bb0123", "exportable": true, "hide_tag": false }, { "name": "Adware.Techsnab", "colour": "#8bc9f0", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777305, "uuid": "31b148ae-223b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1609tkt.slowcube.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762425, "uuid": "8c49e546-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "169.40.135.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "potassium", "colour": "#7dd237", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773739925, "uuid": "297424ae-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.151.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773722645, "uuid": "ed712636-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.146.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738905, "uuid": "c9a903a6-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.23.69.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778265, "uuid": "6dd2e473-223d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761825, "uuid": "26aebbfd-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.186.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773749464, "uuid": "5f3cf6bf-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.190.184.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773758645, "uuid": "bf68a55b-220f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.47.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773758285, "uuid": "e895334b-220e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.161.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773779945, "uuid": "5728483b-2241-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.110.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773773463, "uuid": "3fd7558b-2232-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.229.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773749706, "uuid": "ef5607a6-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.210.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773707406, "uuid": "723ecea3-2198-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.205.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745565, "uuid": "4b0470a5-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.96.163.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762545, "uuid": "d40a87bb-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.230.88", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773739564, "uuid": "522ba5c2-21e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "18z4.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773730745, "uuid": "c970a603-21ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ette6-graph.grosstao.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773749644, "uuid": "ca84ac58-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.12.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736565, "uuid": "56e14198-21dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.50.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773744965, "uuid": "e58e810f-21ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.11.172.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773786845, "uuid": "67c65c0c-2251-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.235.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737283, "uuid": "02d4d3db-21de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.46.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773731525, "uuid": "9a480f7d-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.18.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715445, "uuid": "29dc7345-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.106.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773774545, "uuid": "c42fbeef-2234-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "26u4.sandball.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764106, "uuid": "763bdaa7-221c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.231.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773726485, "uuid": "de8f1ef9-21c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.58.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773716764, "uuid": "3c96ef11-21ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.223.255.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773747485, "uuid": "c35cb428-21f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2dqe6hsl.norsdwest.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773725884, "uuid": "7860f2ae-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.68.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773748566, "uuid": "478aeb17-21f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.70.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773789725, "uuid": "1c900c94-2258-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.190.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740884, "uuid": "653bb104-21e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.81.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773707106, "uuid": "bf7e8974-2197-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.82.70.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773724445, "uuid": "1e427275-21c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "3nsojlm.cokenote.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773771425, "uuid": "80b9ecd0-222d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.22.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764345, "uuid": "04a0f571-221d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.67.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773748985, "uuid": "416e7a19-21f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.68.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773772325, "uuid": "99207550-222f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.76.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773721745, "uuid": "d4efdce7-21b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.232.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773713223, "uuid": "fda565c9-21a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.250.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778685, "uuid": "6844a283-223e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.38.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773731106, "uuid": "a09dc9a5-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.53.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729065, "uuid": "e00db63f-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.158.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec4f8fc1-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.232.33", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773732845, "uuid": "ad4e922c-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.60.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759546, "uuid": "d8187690-2211-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.114.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773782225, "uuid": "a625b1f9-2246-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.194.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773787506, "uuid": "f198c528-2252-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.105.142", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d4034eb2-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.62.197.232", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765665, "uuid": "17900268-2220-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4gen-switch.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773771305, "uuid": "394d3426-222d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4utu6-forge.darkboll.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec56696a-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.69.113.172", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773753245, "uuid": "2ca174b3-2203-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "57ntnp6h.lakebit.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791106, "uuid": "53db3b1b-225b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.47.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762965, "uuid": "ce56fd1c-2219-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.37.243.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773743945, "uuid": "854cdd36-21ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.67.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773732845, "uuid": "ad564e79-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58broegq.norsdwest.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738306, "uuid": "6410134d-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.82.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773742084, "uuid": "30123ae6-21e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.89.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741844, "uuid": "a11f0c11-21e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.86.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773743107, "uuid": "91bcb511-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.130.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec4a4492-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.117.168", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745864, "uuid": "fd854520-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.95.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773723543, "uuid": "04ee3135-21be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766325, "uuid": "a0cd2996-2221-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5c4r-trail.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773726065, "uuid": "e401f6f5-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ilve-vector.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773723307, "uuid": "77f33050-21bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5t0r-hold.cokenote.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773771065, "uuid": "aa246a03-222c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.198.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773709444, "uuid": "3163f9f1-219d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.31.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746707, "uuid": "f3e38bbb-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.42.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773752825, "uuid": "3251b9b4-2202-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.58.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773789125, "uuid": "b6ddc0e8-2256-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.138.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759607, "uuid": "fce63914-2211-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6klywpf.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773744185, "uuid": "14475b97-21ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6tojdb.gronstat.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761585, "uuid": "97e3cb78-2216-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.93.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773773824, "uuid": "16a40eb9-2233-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.140.232.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778685, "uuid": "6844e2ea-223e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.229.17.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728226, "uuid": "ec547fe9-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.93.9.218", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773720906, "uuid": "e0eb348a-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "853rfm15.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773725708, "uuid": "0f7ab11f-21c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "8vxgsoq9.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738365, "uuid": "87b09d46-21e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "a08ulcab.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773706023, "uuid": "3a60d781-2195-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "a2-ghost-v3.columnasol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762485, "uuid": "b02ca527-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alzapdigoo.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762486, "uuid": "b0ff92bc-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alzaptop.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773790385, "uuid": "a619b7ef-2259-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "api-r8-remote.veloxfundo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729606, "uuid": "228f4005-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "assets.fxd-hz-tk-loop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d430a3b6-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "atikintech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791884, "uuid": "233b9dab-225d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth-l9-user.optimumvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773764525, "uuid": "703c9bfd-221d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "aviator-chek.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773784024, "uuid": "d677caeb-224a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1rch0-route.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773730206, "uuid": "884fb1aa-21cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b9a9ec0ece343a68.brambleufer.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773779225, "uuid": "aa132fd2-223f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "banne-shi.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773722106, "uuid": "ac576b87-21ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "banne4-frame.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791165, "uuid": "77067e7c-225b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-f4-infra.optimumvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d44c76ca-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "beckupfinal.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773772744, "uuid": "932fad49-2230-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "biomefocus.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d422cda0-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bkg-fix.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754388, "uuid": "d5c2e999-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bkng-updt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736386, "uuid": "ebd51a03-21db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bloorn-bridge.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d44c71ac-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bnsbackend.mydevsystems.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773786906, "uuid": "8c27fd77-2251-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1-core-j3.amplitudo-v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719945, "uuid": "a428165e-21b5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1e4-point.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773755587, "uuid": "a0573e5b-2208-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1ien-forge.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746584, "uuid": "aa3bf84c-21f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "castgrani.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773776465, "uuid": "3ca098ce-2239-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cedarclient.slowcube.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773730926, "uuid": "3593dbad-21cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "check-gate.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773770525, "uuid": "683b8b87-222b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "circuitpublis.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729666, "uuid": "46b65532-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clinicpulse.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773726424, "uuid": "ba54fa04-21c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clustercheck.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773772265, "uuid": "7541e12b-222f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "compdark.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715925, "uuid": "484b38fc-21ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cor46-layer.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773724084, "uuid": "476a3052-21bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cour1e1-beam.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773725285, "uuid": "13057188-21c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crbn95bh.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773781924, "uuid": "f2fc65ee-2245-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cultur3-array.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773768545, "uuid": "cbfafa31-2226-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d15p6-cast.inksky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773791524, "uuid": "4cfc09f6-225c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "db-g7-point.optimumvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773779885, "uuid": "334679d2-2241-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "delive-crest.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773790565, "uuid": "1144e24b-225a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev-t44-host.veloxfundo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773789184, "uuid": "da30f5b2-2256-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-k4-meta.fluxovivavo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773783426, "uuid": "71abe2d7-2249-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "driver-tru.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773783245, "uuid": "061a43b7-2249-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynlineal3.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705665, "uuid": "64a5782e-2194-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "e9-trace-x.columnasol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773734044, "uuid": "78240c54-21d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "esjxi.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760745, "uuid": "a2f6a584-2214-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "everycarebd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773771845, "uuid": "7b2b1282-222e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "eyw3w.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773747905, "uuid": "bdddc49a-21f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0rrn-core.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773711124, "uuid": "1ae09437-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f2-gate-v0.navispazio.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773743527, "uuid": "8c7e511d-21ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f41th8-spark.flowwow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d4421455-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.wildskreen.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773732607, "uuid": "1fa7c49a-21d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "format5-scope.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745565, "uuid": "4b0ad132-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "framsun.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754386, "uuid": "d4909cbf-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "funducci.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773777725, "uuid": "2bccbaba-223c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gat3wa-craft.slowcube.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773790806, "uuid": "a0db15c9-225a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-v7-entry.veloxfundo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773739206, "uuid": "7cb6f666-21e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gcyryi.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773773945, "uuid": "5ea4be4c-2233-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-5car1et.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754806, "uuid": "cef826c6-2206-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-reg1st.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719643, "uuid": "f09b86ca-21b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gjugxvg.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d4304f55-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "glhoteles.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773767645, "uuid": "b3819a28-2224-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "golsec.inksky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735608, "uuid": "1c0ac3ee-21da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr0wt4-layer.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719406, "uuid": "631a4400-21b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gust-exp.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728825, "uuid": "51151441-21ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gustfil.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d45da390-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "happyglamper.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773722884, "uuid": "7c2a4ef1-21bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hfcn.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773770884, "uuid": "3e9a54c0-222c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-phase.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773733625, "uuid": "7e48ade9-21d5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "i08da.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773788406, "uuid": "0a609562-2255-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "id-x992-node.fluxovivavo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773789425, "uuid": "695aab3b-2257-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "infra-z0-static.fluxovivavo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740406, "uuid": "47c3a2dc-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j40frzwa.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773710765, "uuid": "44c4fe3f-21a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j8-web-infra.navispazio.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762905, "uuid": "aab3dfbc-2219-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jhh0yt.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773785224, "uuid": "a1eeb893-224d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k5-dist-z07.versicodex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773707764, "uuid": "47deb18a-2199-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k7-sync-v2.fossaflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773769024, "uuid": "e9fb58d0-2227-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelvenis7.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d45928a9-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kloudtechnology.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773775385, "uuid": "b915beaf-2236-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "klvkpw.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773752948, "uuid": "7b6dc82a-2202-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kp1vwn9m.lakebit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773711845, "uuid": "c86a6cbe-21a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0-main-v7.navispazio.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773776886, "uuid": "378e69cc-223a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "launchprocess.slowcube.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741184, "uuid": "17e47e41-21e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "le4r-vector.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773762364, "uuid": "684679ae-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-draa.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773785585, "uuid": "78a3bfcc-224e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m2-infra-b4.versicodex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773744725, "uuid": "567a13e2-21ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m3rge4-point.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773706444, "uuid": "350d0f0f-2196-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m5-vision-9.columnasol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773715567, "uuid": "731dd0ad-21ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "markterminal.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773739985, "uuid": "4d4cfd68-21e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "measurecircu.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745864, "uuid": "fd8c179d-21f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mujlhpe.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773707106, "uuid": "bf8a7778-2197-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n4-bridge-z.fossaflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728166, "uuid": "c8368163-21c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nelark.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754985, "uuid": "39fcd671-2207-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-sc4r1.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773768125, "uuid": "d1df6446-2225-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-t1ny.inksky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773790986, "uuid": "0c4bab75-225b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "net-d8-global.optimumvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778688, "uuid": "69990ca5-223e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nmgixmc.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778864, "uuid": "d2f509af-223e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "norcore4ex.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780906, "uuid": "93b8baef-2243-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nordraal4.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773734347, "uuid": "2c8f086b-21d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "notifi-vault.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780245, "uuid": "09c5e5d5-2242-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nqsl.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773778205, "uuid": "4a17d252-223d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "openpure.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737528, "uuid": "949322cd-21de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticwin.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773707406, "uuid": "7247b593-2198-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0-scan-x8.fossaflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773749528, "uuid": "84e07625-21fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0rta-node.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773741906, "uuid": "c5fbcc76-21e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pasturepow.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754388, "uuid": "d5c941ec-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "payables-notification.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773774125, "uuid": "ca41edb2-2233-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-tra.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773780605, "uuid": "e09cfadd-2242-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "petalcra.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765965, "uuid": "ca6264bb-2220-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-ed1t.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773709806, "uuid": "08d7ddf1-219e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "q7-base-99.muralis-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773761825, "uuid": "26b8532e-2217-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qpml0.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773734764, "uuid": "256690ad-21d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcrest2en.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773783725, "uuid": "2436385f-224a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quordra5a.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773722465, "uuid": "8279e9fc-21bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quortideex3.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773781565, "uuid": "1cc7f177-2245-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qxff.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773710045, "uuid": "97349b23-219e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r1-core-v3.muralis-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773738785, "uuid": "8208a407-21e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "raibark.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d45f958a-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rangenine.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d474bc8e-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rbcoeconsulting.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773740706, "uuid": "faa2f16c-21e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rbvjsji.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773779645, "uuid": "a40756c5-2240-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "riv3-node.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736805, "uuid": "e5f8a971-21dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ro4d-stream.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773751745, "uuid": "ae8a33a5-21ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "routcha.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773766685, "uuid": "775ce003-2222-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "royalmonitor.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773728405, "uuid": "5697b905-21c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s3cre-plate.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773711427, "uuid": "ceeff99b-21a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s5-sync-x1.navispazio.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773721324, "uuid": "da885c08-21b8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sales-path.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729845, "uuid": "b10ac9b0-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sbstorage.club" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773747125, "uuid": "ecc41003-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-draon.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773775565, "uuid": "24768507-2237-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sertideex1.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d46620ae-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shipmint.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773765485, "uuid": "ac632621-221f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverins.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773743107, "uuid": "91c47eb0-21eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solmesha7.flowwow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773720544, "uuid": "096a0582-21b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solvenum.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759006, "uuid": "969fa816-2210-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "spring8-branch.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773753185, "uuid": "090f807a-2203-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stac5-signal.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773742625, "uuid": "72727e7a-21ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "synt-sheet.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773721985, "uuid": "64018237-21ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t1d3-reach.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773710406, "uuid": "6ea99eaa-219f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t4-link-x2.muralis-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773745084, "uuid": "2c65b6bb-21f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-lineal.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773744365, "uuid": "7fe3a0a3-21ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "taldraor1.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773781265, "uuid": "69c94ba6-2244-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tiny-stack.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773746765, "uuid": "165a0f23-21f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tinyruntime.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773759306, "uuid": "4952a11c-2211-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr3nd-plate.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773731645, "uuid": "e1f7a3ae-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trailertrue.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773736025, "uuid": "14e9b155-21db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tren-sai.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773760265, "uuid": "84c12097-2213-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tridraar2.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773773224, "uuid": "b15c7c27-2231-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "truemeasur.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773724865, "uuid": "18ef888f-21c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ts2hfdf.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773709385, "uuid": "0dfe6641-219d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "u2-orbit-z.muralis-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773773345, "uuid": "f97932ed-2231-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uc450c98c4c09a1c00cf0340baec.dl.dropboxusercontent.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773769564, "uuid": "2bcfd30f-2229-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "urb4n-gate.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773785885, "uuid": "2bbac978-224f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v0-srv-q82.amplitudo-v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773788765, "uuid": "e063e1f0-2255-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v1-sync-h07.fluxovivavo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708426, "uuid": "d27cccb5-219a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v4-zone-12.stratagrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773733325, "uuid": "cb5c082c-21d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "videobiome.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d42fb96c-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "visualytes.crm360degree.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773723665, "uuid": "4d70411a-21be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorven9is.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708064, "uuid": "fabfeda5-2199-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w1-rim-node.stratagrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773785044, "uuid": "364bafb9-224d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w3-sync-v99.versicodex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737645, "uuid": "da7398da-21de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmcha.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754385, "uuid": "d4631604-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "weblive.tv" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729244, "uuid": "4b151224-21cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wu9h.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773754387, "uuid": "d5136f5c-2205-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.wanneroos.com.au" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773786606, "uuid": "d944c5c2-2250-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "x4-web-p09.amplitudo-v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773709145, "uuid": "7f2dac83-219c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "x9-space-v5.stratagrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773719044, "uuid": "8b6ec32b-21b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yefa.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773731283, "uuid": "0a933747-21d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yefwc3t.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773737948, "uuid": "8eba38d9-21df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yzkzwt.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773708784, "uuid": "a7fe44f1-219b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "z0-field-x.stratagrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773786245, "uuid": "0214b08c-2250-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "z6-app-h11.amplitudo-v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773726906, "uuid": "d95dd0a5-21c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeee.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773735186, "uuid": "20f4e533-21d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeh4rg.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773767045, "uuid": "4defed29-2223-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zentide0on.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773729964, "uuid": "f826e5cd-21cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zk370qhd.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773775925, "uuid": "fac8c549-2237-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "znnyfo.sandball.in.net" } ] } }