{ "Event": { "published": true, "date": "2026-04-23", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-23", "timestamp": 1776989725, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "1f04d019-a73a-4be9-b385-10adc48e864b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776902526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902526, "uuid": "6f6465af-5adc-4883-9681-88cc3fe93892", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902526, "uuid": "c7e53aad-b455-40b1-bb63-5631d1a4f75d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902526, "uuid": "fe115112-bd33-4d12-be0d-a5241d4d934f", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902526, "uuid": "82088ae7-5510-4b7c-b8c2-56b449a933fa", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776902526, "uuid": "622b8a55-2dcb-487d-9b65-3f8e23e441ab", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fa30c2c-0ef2-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1776902670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902670, "uuid": "79b5f955-9371-4164-b6ae-1cce9e098776", "comment": "Malware payload", "value": "8a202b827f009582d347dd6dfe98aee4", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902670, "uuid": "8571dcda-768f-490e-b746-189bf1bd5c60", "comment": "Malware payload", "value": "6c143930a3c3b82e7ac25412fd74dc376cad1db9ff66ae25cd95da7f0a32da4d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902670, "uuid": "22df00a9-310f-409b-94a9-1263a2c8449f", "value": "T18841E2019FE74B3ED7264234AC76A241533B7555F4965F8D9040478404B3001956CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902670, "uuid": "19bc6475-1014-4ec7-b1b6-bf45f2111be2", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1HRXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhdymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776902670, "uuid": "afd4de36-3f17-4c09-bc31-5d4860ff585f", "value": 1951, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902670, "uuid": "c7581f07-252b-48c3-af78-54df3e6ba1ae", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776902723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902723, "uuid": "7ab0e89a-c693-43da-ae6a-53cce1529fa3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902723, "uuid": "04b7b9cb-8f87-430a-8bd2-1b575233c175", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902723, "uuid": "b831e630-c588-4251-8e28-f58c940e2b17", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902723, "uuid": "e45ff0f7-897a-43dd-a351-4c37291278c6", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776902723, "uuid": "1490344f-c006-4e49-9c77-6b5be1677bbe", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e39706b-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776902801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902801, "uuid": "8f15e8d1-9072-41a1-a80a-2f43487307f1", "comment": "Malware payload", "value": "4b8c38daa231117e18eddfc4a153f911", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902801, "uuid": "4b10081c-9fad-48c9-ba2a-c306627f4493", "comment": "Malware payload", "value": "d4b85c45262ed37946bb5687de24e853332000c7f234bcadc163fb55bad87bcd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902801, "uuid": "33678ee3-6ebd-4545-bcc1-d4c4f8c893ea", "value": "T127931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902801, "uuid": "a277853a-d206-48d6-b463-9963734c99d0", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKq/s1kKrrW:n8JIe0GitkbFv2v05xWjrW/s1kUrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776902801, "uuid": "a2dfd184-b06e-403c-bf07-ad1003c03dcf", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902801, "uuid": "2e4457a3-a8c8-4b59-a222-3eefd6e50687", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776902827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902827, "uuid": "f97216a8-0b85-4981-a5a9-776bc814df2c", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902827, "uuid": "d0f07cf6-ad52-4b7d-b8bd-72bf49cfae60", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902827, "uuid": "bd11965b-dc85-4baa-8724-05ac385e1e73", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902827, "uuid": "6c889003-8fbc-45b7-92dc-25194bb2bb48", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776902827, "uuid": "565e0dc9-bf1c-49ff-97da-cc6fee0eea51", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fca7683-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776903295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903295, "uuid": "8113d1f3-256b-4110-b64f-5822dd5bcb90", "comment": "Malware payload (CoinMiner)", "value": "1c16a630f64fcde9c94e5fa219374330", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903295, "uuid": "92147303-803c-4170-af2c-a645cc8ad676", "comment": "Malware payload (CoinMiner)", "value": "efdf8e6d182ba4644375fa7eaad615b0df41f4e872e1550466e76c8b2d816ddb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903295, "uuid": "51420d1f-b222-4ac2-a12a-6e65670d6378", "value": "T11D563362F440E432E038203925F684A6B17DFD7347654A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903295, "uuid": "88bdffd3-510e-4ab1-937a-fdce1d16f049", "value": "98304:EUmC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3muRH6OJAMp+ysk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776903295, "uuid": "4c3b9a31-de39-493e-b9d4-a5ebb91c3b5f", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903295, "uuid": "d1bb6725-dc9e-4c7a-bff9-10f741a52bad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16862a84-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776903479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903479, "uuid": "987e9f30-453f-4010-93b0-b40db70619cf", "comment": "Malware payload", "value": "3f5605d15ff19e86b136c29857d93101", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903479, "uuid": "0ed5a123-73e8-4c62-91ee-5c0cc6961bf4", "comment": "Malware payload", "value": "6d1a5e0ef0615180c6cfc9e2194a82c32b7992a3ec3073547170797515422eff", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903479, "uuid": "1f8d4d97-b53b-48ab-b70a-bd9b1dd3c5bc", "value": "5473121623A92971627146F1E7FE6F8CE10D3A688FF16C247C217C68B93236E5CD8519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903479, "uuid": "de6668fc-4f5a-4da4-a2cd-7ad749e187a9", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3O:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776903479, "uuid": "cf3e0216-7f43-4bbf-a0ce-a45dc66ca3f9", "value": 73848, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f9e2f52-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776903535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903535, "uuid": "bba8a773-774d-4df7-8838-af16787a9ee9", "comment": "Malware payload", "value": "06c7d4ef9101051a691d7fbf1788ac11", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903535, "uuid": "f4b84d72-7a7d-42b8-a8e0-4e673cfedffb", "comment": "Malware payload", "value": "a86214f97c02e40ab21b8cf369acb3c1b6250011960afbc97e04040b2ffa5fb3", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903535, "uuid": "646e9415-c871-411f-9c3f-9f395874c9fb", "value": "T1AAF23A487B98C12BDBAF0E7D75621A50167196621203DFD53ECC64EEFF937048612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903535, "uuid": "18de1300-30de-4473-9533-c0f820348b63", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903535, "uuid": "8540558a-9316-4fc7-9c21-92fce1864d35", "value": "768:imQZqx1lYcTYbFyf8qbIjPjnbaoXbYC10ko0C:i0lYibIjPjRbPod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776903535, "uuid": "7162c000-6e0d-4f22-a1bd-3d78a480efdd", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903535, "uuid": "ece781e2-ee14-4106-b2c9-e758da3ff2a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776903742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903742, "uuid": "2937ceb5-8f17-4913-95de-48a3c95ae2ee", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903742, "uuid": "7db1bb3a-5268-4fa5-a1de-da5fa9ea13cc", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903742, "uuid": "55f841fa-adf0-4ccd-a5c0-061406edffd1", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903742, "uuid": "71c617fa-e72c-40fe-bb38-1a4bcd588dd1", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776903742, "uuid": "51d7503e-442a-424e-8f7f-8b6a12230588", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd970c4-0ef2-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776909797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909797, "uuid": "172a0f35-1538-4035-87d7-139c0f22393d", "comment": "Malware payload (CoinMiner)", "value": "8caa858a427dda38bced89183ad90530", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909797, "uuid": "ab11c302-664d-4b85-aed6-a87a38420efb", "comment": "Malware payload (CoinMiner)", "value": "717fac4c5f7f77428de80b2da5edf4af459f6076ecffb288bcbdcede21f81961", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909797, "uuid": "d83b0cf2-7a3e-4078-b3bf-8b7bf47ced45", "value": "T1E0563355F0405822F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909797, "uuid": "b2e63d85-abf6-41b4-a977-595b872be965", "value": "98304:EUJC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+Li3jxqQjz4F4VRc:JWfTFU3muRH6OJAMp+e3jYqW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776909797, "uuid": "c934eb2c-9584-44a7-8259-af719a9f48d2", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909797, "uuid": "54320031-8a6f-48e8-b5a8-e66e30569892", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e08d4c5-3ec6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776915820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776915820, "uuid": "ff1fb43a-4e8b-406e-8fed-86438c9f039b", "comment": "Malware payload (Mirai)", "value": "1b1ec24e38bbe9de797de500bcc5aaeb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776915820, "uuid": "9f567f4b-4c70-4e1f-96a3-021151e4b0b7", "comment": "Malware payload (Mirai)", "value": "9402444c99fccff14a6d2c13cc045002f8a1faab4fff9d4bd61039dd4cf7e1ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776915820, "uuid": "05660fed-6519-4299-b3d5-800fb1bb4234", "value": "T153A2E17DFB20C1CCF082847E2957127B456FF8A64B98420EAE15D0C701C79DEE49AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776915820, "uuid": "4382d7e9-3265-40c9-8809-ebc0d77622ea", "value": "384:TDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxh+cP:TDZ5Dw7RjFjcU+O24sDS4HhrhpEguX3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776915820, "uuid": "aa9acf89-7a29-47d4-b453-ff52981a7d41", "value": 23260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776915820, "uuid": "c96ed92e-a2b6-4b62-aa38-76fa2454c1d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1776919062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919062, "uuid": "39f9f5d0-0a99-4215-b842-10473e1c110f", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919062, "uuid": "35bc6aa9-318a-4e89-940a-d2e8d2b5dd61", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919062, "uuid": "26bfbe4c-f4bc-4ff7-bf40-837e036fdc8e", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919062, "uuid": "1872d871-9ce3-46e6-af20-5f986fb7b5db", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776919062, "uuid": "7cbb3847-1d41-4eab-adfe-bc7e7eafaf0a", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919062, "uuid": "db931d02-9553-47dd-98c0-0ec24b628bd1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9992c8ac-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776919268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919268, "uuid": "ebfc094c-7e57-470a-8b32-1a5aab936f07", "comment": "Malware payload", "value": "4364edb4bb60483484a8969139824ad1", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919268, "uuid": "3016fca5-4b1b-42a8-bb95-4b0688741ff6", "comment": "Malware payload", "value": "c88329363ed1f2c9aef2a64b3e5b21864a78b3246a5adf73fb5a4a4b00b0168d", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919268, "uuid": "acf970bb-2232-40ef-9868-8f0db36fb904", "value": "T1F3168D1BBCB95C69C09AB13484736605F674B8451B1327CB1BB0F6282F7A3F25ABDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919268, "uuid": "7fe165fd-0a93-4871-a81c-1ddc3eaa45b3", "value": "aaefd5ffb560a82916eff055ade172de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919268, "uuid": "91e566a1-b097-4bb5-87ca-2eaa2957231f", "value": "49152:thGnzDUXUSMVC9lcmJxRQWnnF5nfDBHEsZs+jjKfQcQssS+gNAKym:thov+RljJ1a+VVgNAKym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776919268, "uuid": "bdd03eaa-9e65-4673-804e-d583a9754902", "value": 4308472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919268, "uuid": "4f65eaad-cfd3-4d0c-a440-61b004148c02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57ef2a9-3ecf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776919724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919724, "uuid": "a3037dbb-5e19-4426-9623-eb2ddb5f0130", "comment": "Malware payload", "value": "c6b70d1389c34fff2f3af712efa7cbec", "object_relation": "md5", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919724, "uuid": "ef5e26ab-60ab-40ae-b0b0-5f6a6d11101b", "comment": "Malware payload", "value": "af9f4a0d319edb9a7c0dd2e98f2079d6b14b42e6a5a43a9ea3021f7c11197c0a", "object_relation": "sha256", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919724, "uuid": "f9e7c6f0-95bf-4f78-bb4f-440be86e7276", "value": "T140073392DD12E51E2AFDBBCBB1669863A1F04E205FE8D2755D328B2027F55257F0EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919724, "uuid": "e6352076-cd35-45e6-86f9-e31018ecaf66", "value": "393216:YJ3CqOckNXNFnd5J/8FiASAJ6DRPztOghmzheSnMnhzJh:gN2Fndj/81B6D3hOMZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776919724, "uuid": "915c7ac8-7e3e-47d9-9380-bc3d3ae4b146", "value": 18049022, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919724, "uuid": "532bf408-4feb-4788-a078-40a7617dc8c6", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2df8a6c3-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776919927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919927, "uuid": "2df9869d-2080-4f5f-89b4-a0dffc493d20", "comment": "Malware payload", "value": "7153a0468e0b7eef52e6258f724b765e", "object_relation": "md5", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919927, "uuid": "5ec3a345-d4ac-4acc-b54e-6513e03de1c1", "comment": "Malware payload", "value": "b5caa1d89c3c914f16f591f0d3f26b23de125a9dd0ba1ec065937be2c662cf29", "object_relation": "sha256", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919927, "uuid": "578e9adb-1a66-4320-aabe-8ca61c45fc88", "value": "T1A007336A78AC3D63C211BB7C19B36CE74849B50865FED58287F20453FF92F8616A38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919927, "uuid": "f10d5824-be7c-4963-b250-63e4db395101", "value": "393216:AShiowv38K3cl157IbaeuQoT5QqBLycP4WJlIz/ImG8NCd:ThM38IzbeV5jRyEbJCI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776919927, "uuid": "0a03463d-736c-4b3c-a3e8-66ea809cdf4e", "value": 18155566, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919927, "uuid": "99a59639-8cb1-44d6-8612-729ed3a34110", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ebd9972-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776919928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919928, "uuid": "e4a4552d-df95-4467-8a11-af677a813522", "comment": "Malware payload (Mirai)", "value": "374f07bd0cdb8ea0f9dea3820b314158", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919928, "uuid": "51be4ac7-31ba-409c-9ab8-10347ae9348d", "comment": "Malware payload (Mirai)", "value": "706c36b15be5740e9e5b1cb739e238cd845be92ce6a0742a1248473aaa5144ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919928, "uuid": "aadf5b7b-bd1d-42fb-b667-372f94df0d45", "value": "T110C2E1E07726FA31C4206C3DE52A4D8A3A510A7C90FF353764258C399EC1A5B63F84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919928, "uuid": "193e147f-5dd2-4012-b664-02eb2d9383e5", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrw9q3UELun:PKy4qfqoeJdXWg5LC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776919928, "uuid": "149ad331-1446-4f86-923c-5a622f86e339", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919928, "uuid": "02648e26-b169-4723-b1a2-9757f0c5a5da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96d21705-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776920102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920102, "uuid": "466c1efc-66c4-44a1-9136-ce9ddc376280", "comment": "Malware payload", "value": "606a35ad90796da9c899cf291050eb73", "object_relation": "md5", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920102, "uuid": "99860cf7-4db7-4b6e-b41a-525ecacac743", "comment": "Malware payload", "value": "e0534a6be1417685a13ab92705a8c9ae5ef05b289383665ad1572cc8a3d3b5ae", "object_relation": "sha256", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920102, "uuid": "6dfe1569-123e-43b0-a48f-b203696411c9", "value": "T12D073342B4A1F659DEC655A62C3B45B73FBB1188B85FB993F68E0AA3F47B1400F113", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920102, "uuid": "8048725b-efb2-4750-a39b-1819a247e5b4", "value": "393216:eSleMyMBxbDdvdv2g/nnHCKB/0+trk1F6tbfmZ:eSE3MBBdvMaHc+wFcbuZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776920102, "uuid": "433fb951-27c7-49ba-8a39-69e5c897b38e", "value": 17554046, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920102, "uuid": "889a22c6-27d8-46a5-bd1f-52c713653674", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58e5c14c-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776920428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920428, "uuid": "e1585dee-42ec-41a3-9d71-0f56dd54b393", "comment": "Malware payload (Mirai)", "value": "13f04e37cce9774fec4375bb32d4ba4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920428, "uuid": "a6b6e86e-6603-4380-8442-4d8d22fd2e93", "comment": "Malware payload (Mirai)", "value": "0ca513a03941e73ccc2b94c6a035f7673dcde57e35c6cece1734af87891a1c65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920428, "uuid": "80f7d73d-a7d5-4c3b-8367-0d499fe06664", "value": "T170336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920428, "uuid": "43d5f1ff-baa5-497f-95d7-cec5b7c35e19", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776920428, "uuid": "9613dacf-8a8f-4f69-845f-dc74aac26d76", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920428, "uuid": "54e78848-7295-49b5-8230-a0306fade729", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "840ffc70-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776920500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920500, "uuid": "7dee55b9-30dc-42c1-9e0d-78d2e5711512", "comment": "Malware payload", "value": "b39662bcb7a5607bc16a972f531ba290", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920500, "uuid": "e5857c79-361f-4223-8a35-aed1345664b1", "comment": "Malware payload", "value": "0c71cfc9e549add5f7827b3fbf5f6affcd821b2273dff7f4860f4fa8299c0a56", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920500, "uuid": "c4a3afe5-b642-4bc4-a5d3-863b8dcb0bb3", "value": "T12793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920500, "uuid": "54fa6d35-b3a5-470f-b405-d5a09e05dea0", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXBIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776920500, "uuid": "6df3c824-448b-4d70-a0df-d7c68cfb2239", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920500, "uuid": "0b2156ef-2a13-48f6-9df3-dc8a00a103dc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc27e4bd-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776920595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920595, "uuid": "20327e7f-3bf6-4665-9f32-e3239c3f9dd7", "comment": "Malware payload (Mirai)", "value": "b677a3da58b1fe98afbb8343c5f55d83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920595, "uuid": "a5844d3e-4e23-45ad-88ee-035b9ac6f09b", "comment": "Malware payload (Mirai)", "value": "7d1653c276e96ac9409ce828d74ec8320bdd03952e94dae482a27abedb717a87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920595, "uuid": "08685bf5-259c-4941-a64a-a76ae0c84a43", "value": "T170330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920595, "uuid": "cd290881-ff69-48ff-b00a-e2c5a55654c5", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGB:r/hqaJMDg9eqK806MHdkfQX6HuCB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776920595, "uuid": "4c2f51bb-2231-49c8-868c-d951e9f7a275", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920595, "uuid": "cce3611d-424b-424c-9bcb-1210b80a81f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "987d2371-3ed2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776920964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920964, "uuid": "8f9c0994-e234-4427-b23f-2fcc4544b10a", "comment": "Malware payload", "value": "3be953434ed3b8d70dbfa25b0f00477d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920964, "uuid": "4485c645-ba33-4e68-910e-dafb62646b71", "comment": "Malware payload", "value": "9b3fdb7b91e88f39ec95045992afa961a80327441cb96423aade112c167582b1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920964, "uuid": "cc685d0b-053f-4eee-874e-050deafc2f3f", "value": "T15BD342CF8B9E88DE875F2019442BAD42C65F5213196DC6F57EDFAE453F12D60B0A98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920964, "uuid": "54ce36e1-77f2-409d-ab5c-fe621392121f", "value": "768:IBFJvSqB6LbO2Bx1+on3C19aqNzpMtTO+4p0F1qRxHimpOZA1B0Um0OY0BwI0cdk:2vSHDV6eL+BA2wKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776920964, "uuid": "31f8f77f-c9ec-44f9-8449-e0f1ac6f4337", "value": 142545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920964, "uuid": "c82197b5-d9f0-42b7-b1f7-17c3f7b2b602", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c50711d2-3ed3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921468, "uuid": "f65f3c73-a894-42d0-b912-337b1516cc21", "comment": "Malware payload (Mirai)", "value": "6a79152066642b34163a23b44b240492", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921468, "uuid": "a6453c72-85cc-4ab3-8fc1-e9a6a565cf6d", "comment": "Malware payload (Mirai)", "value": "c2e0a3f9731a2ba84cb35831e3c069582c436d6521a349f3b16ca621e9962938", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921468, "uuid": "80d55a52-71df-4779-9b35-56137ebd0372", "value": "T11EB2C0CD65443088C98D7C7C278D4A664F6CA1D0BADD9F26E354CDD8B3BEA8B34590", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921468, "uuid": "f5f2807c-5f11-4f2c-afc6-e45fe54a0e3b", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpTZqSWvj:4QlS07FUXqIYSXQKquFqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921468, "uuid": "b29071ef-b215-40eb-8618-c39ff8865ff7", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921468, "uuid": "96f1326e-4538-46df-b1f9-9aed8fad8120", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d2b1459-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921724, "uuid": "e9f86f2f-f8e2-49a3-8db7-1cb59a8a05e3", "comment": "Malware payload (Mirai)", "value": "caadefe79352d1d1fc8438ecd1fcceca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921724, "uuid": "5476e55e-d802-4944-a3ad-c35770b20c52", "comment": "Malware payload (Mirai)", "value": "8680bfd864a825c60580342c89c44c43fa87d2978c93c594e4f339d1115de5eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921724, "uuid": "98f513b9-920e-4691-8f11-1229027da631", "value": "T118B2CF3C1B151A98EE1EC0BD839D0B603DB42F659182AD8B7206EDC79F968747453A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921724, "uuid": "68210e1c-5ed1-442c-bf57-5d3dfb16a227", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiJZPmdtJgGlzDpH7uNj1Jz:YeD8ZSWvZHZbs1row697qohQvg9XitJ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921724, "uuid": "1287f48c-1b11-47de-9355-4c939a93ea22", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921724, "uuid": "b0b29afa-2ffe-4a6e-8f3a-1e5fd6af5930", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "727af337-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921759, "uuid": "5f35efdc-ce1e-45cd-85a9-1451fa22c8f7", "comment": "Malware payload (Mirai)", "value": "2e1834b73cf2cf8cfc987c5e9600120e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921759, "uuid": "bbc98c0d-8ee9-4346-857e-3cdbf1e5b076", "comment": "Malware payload (Mirai)", "value": "372e4581d02ca3de78cbd40019c31c7edb3de9c2bcb4e707ff8a068b100409dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921759, "uuid": "d6d64f21-a4b2-4223-b586-81d911b9ced8", "value": "T1C7B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921759, "uuid": "4084ebbf-d830-4673-b42f-f89965cafc57", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1m/LWy:c9sSyzz36YaWWgg1mq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921759, "uuid": "9c2e9fc1-e77f-406c-8fa6-79726ad76b76", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921759, "uuid": "d69862e0-7389-4b94-834f-4fcf5c3511af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80df568f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776921784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921784, "uuid": "cb0b8a33-ea8e-4491-aa0a-429b1469a149", "comment": "Malware payload", "value": "d55658600fb42e8995881e88da5b2d8e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921784, "uuid": "aafaae75-bf72-42b6-ae11-228e181017cb", "comment": "Malware payload", "value": "ec91e6cda4ce2f4d7ec759767478a5449567e3d609c1c8cde9f9f8d867581239", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921784, "uuid": "2d1c815f-680b-47e9-b469-8e37c55de964", "value": "T1708309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921784, "uuid": "11a6b9bf-c89a-4db2-ac80-32b34afe0a5e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnRWaMVN/:XEKltp9txAX/yr2pbRWZVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921784, "uuid": "5d635fe0-f4e1-4430-9750-fda47754d070", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921784, "uuid": "d0e99533-9f0e-4148-9f38-d83a0db95e1d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99654b41-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921825, "uuid": "4998c30f-80a1-4689-ac0e-e6ba8d4c6eb5", "comment": "Malware payload (Mirai)", "value": "affd1222f7bec68c764c8c87494ce3a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921825, "uuid": "5cbb3c1f-e912-4ef8-a230-954b6eb58b03", "comment": "Malware payload (Mirai)", "value": "a9d120626cc07051f4329a33c8f8ce14d460d687d686cdf3a5cee56be63deddb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921825, "uuid": "4017c52d-5f5f-48eb-b7ec-2fea0fbb6298", "value": "T1D0230271890E9EF125303C72EB99979376A119B1C6673013DA280A3C7FB5A131E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921825, "uuid": "5218742a-f719-455d-b09e-c1b2f8198a24", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3S9q3UELbUXfi6nVMQHI4vcGpvl:DECFd+A6YHAxHLRQZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921825, "uuid": "d9675a22-49bb-4cb8-95fd-efff527cc137", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921825, "uuid": "f740b234-7167-4ad4-97ee-027039b603b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac6a16ef-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "d65ac313-d8ff-4dc5-944b-bbab3f0278a6", "comment": "Malware payload (Mirai)", "value": "d8a17af2f9f107c6f7c94f0ac195ed70", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "d6086fc2-0a8c-4c1d-b558-a2d86d23d770", "comment": "Malware payload (Mirai)", "value": "b952a69d929cc2f906cac67cc88724245db954b98b8007855d03ef2ce012ef23", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "8a580713-49e1-4a6f-92a5-e12b845efdfa", "value": "T1A8B28DF1B2077CD2D461EB3658D083252993F13D1AE3A3863764EBDFB83ABA119271", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "a221e2ff-6eeb-41e7-b38d-46a4006d44c2", "value": "384:KQxxMtu+61W/mlbo06gIKn4rBVVHUubSdrFLLygiLptib1B+IYa:JStWW/mW3gIKn4rBVZUub4rFLXiyAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921857, "uuid": "3cc12f6f-a073-4da8-963d-2aff2fe6cfa7", "value": 25484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "f158114c-d388-406d-9ea8-247044e2fc17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac70de37-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "983082fe-9532-48fb-96a1-4253f0257a5b", "comment": "Malware payload (Mirai)", "value": "21db9c0fc8c6d2dcb07a363eaa4f8035", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "422464bd-4550-436e-b28e-79572d8798c5", "comment": "Malware payload (Mirai)", "value": "5a07168bf087b0ebf5735ff4757dd00a59a95a098d15fb8a42cf588ec04ccc94", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "e4851f38-99c4-429d-9193-b58d9279bd0a", "value": "T14B533B16BED25E56DC3ACA34842E134B17F19A9E97C1932760788D8C79FC7509BC3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "5c8eb22f-83e3-485c-b48d-79dc57cdc485", "value": "384:Da838jEouyh6oaKR8ZaZ2hCj0N8z5+xwjZb8H8EsgG/HptibEB+IYwc:p3SEb88Zakha025+xw9VA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921857, "uuid": "142024ca-42a5-4a6c-b1fd-a652893105a3", "value": 66584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "3d970136-6b60-443b-8acc-165ad30be0c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acb1f7cf-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "7296be03-9517-47ea-b128-90005f1c6c18", "comment": "Malware payload (Mirai)", "value": "7bf7c1beb093ee234050c1d3740d7816", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "7a7293a1-784b-4bf9-aeef-1cb76fdaba58", "comment": "Malware payload (Mirai)", "value": "0ba4e1cdaf70b03e78d664ab4ccafd02c4e77e060c4be32d9fb08049d2267086", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "05b1b3cc-3353-495f-9c7b-6679792e8ecd", "value": "T1E2537D523F324E90DA2BD17149A7CA656FB029856CF282C773A0D71CAE3D7580C1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "4901fec4-543e-4379-b2ef-b9a7df70404c", "value": "384:cnunebxIBKBFXbtAXIQz+tYWqCrRkCx0LaDdHRBfAptibEB+RpKsbDMd:c8ew4ru4XYxCr50uDdbfs8UkDW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921857, "uuid": "8e7821a3-55c9-4980-8c9d-663fecda0f2d", "value": 66584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921857, "uuid": "24e04d07-fc85-4722-a63d-109d7b19e11b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace91caa-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "fdedf312-b62d-4e03-9a5f-ed81b8cbfbe5", "comment": "Malware payload (Mirai)", "value": "e731963d4484bf1894b81f006a301859", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "1e9b8189-a60b-4885-8d54-bed8ab08bcb8", "comment": "Malware payload (Mirai)", "value": "e29b3d9441caedba74df3c70096d6d97b53c600fc4cdd6b50021bb07804f770d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "007621de-32eb-4f5a-abc3-e48e097b8cbd", "value": "T1E3058D5BFD1E3D47D2EAD33E9F4A83B1A22BB190C71351623582032C94C66DD8FB16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "1c21da43-57a7-4be5-a9f1-62d2a734ba00", "value": "12288:Tl2cuKhpaHvi2yW63wjMRCTCuCjCvJkKlTow5mf4TNkrBY7hTAfmp:gVwpav6aMRCGuYxwWOyrBY9TAfm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "34c8a99f-c0a6-4d11-87f3-6defa5da34e2", "value": 859800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "473f2296-e8d7-495c-9d26-de20c121710f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acfed5d7-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "075aef41-6e46-4008-beca-391cda3d1bec", "comment": "Malware payload (Mirai)", "value": "f790edea55d2b96858053ab70a43c4c7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "591d6228-f640-4cf4-9a80-dffbb3fa19e4", "comment": "Malware payload (Mirai)", "value": "6062a1d54773eaa3933b94cee181fabf5e1f29e89ef6c772facddd7b4d5b1cac", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "a3cadbc3-eaf9-4552-a514-f9a5ddd6cb88", "value": "T10DC4CF67F9225C43C4E3963E15A7C2755267D24A1792E302A30FF9BD3AC63394B1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "a30391ee-e6c5-485d-b96e-548ceb585bdf", "value": "12288:n6ZvgsW9Mz2oq1zS7gRoMayXURygpQ33OosvRKKIFBpG6Ie:9CczS7GhezvRKKITpG6I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "bc3796b0-dd19-4dab-a755-9ee40642a4a5", "value": 571680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "ce8f7768-704e-4026-a26c-6c5e0fa885e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acff3702-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "cd7faa4d-1e4a-40e2-a2b3-4dabeadf8dcd", "comment": "Malware payload (Mirai)", "value": "870d1b7eb1d8c72439c4e6a5c789f1ad", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "69aad748-a029-44a8-a4e9-6da36424c3ba", "comment": "Malware payload (Mirai)", "value": "94e92792d59b57c819d3d4645f77a247ed4121c577fa5381fd3097e99ead2266", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "640034a5-c345-434c-a931-6bfb6d672675", "value": "T1F5E23A8679159966C9C0147AF99A525C332307B8E3DF7303BE10972936A3F2B0EBBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "ce1bff35-b86c-4128-bbfa-590c973834e7", "value": "768:aAaIzmKrEUH5w+ASRUclFHu9/FLXOH72j0ZubA0:BfhOXSRUIHUZRjv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "faa817a5-5336-4cfb-9f68-05d3c5712d08", "value": 33572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "7adcfd49-57da-40f2-8b5f-b107eda2e7bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3943ae-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "12ff7230-3285-402d-8892-26623bacae6f", "comment": "Malware payload (Mirai)", "value": "dcf9ae237c0e83e0bb9ca1687aa9ab4a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "6d68ee7f-e413-4f90-b54c-ba2be762b109", "comment": "Malware payload (Mirai)", "value": "b2e863f0b529c89f0dc36b272fef49659a86c8af3eedf28eff5ca29d919d4831", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "9f10538c-991e-45b0-8199-f2413364270b", "value": "T1C7D46BC5A6D3C0F1E56700F0189FDBEB1634D3224443DAF7E68C19A679A1F921A2B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "856e1310-836b-4cc8-a0f3-093d1435cd25", "value": "12288:j9h+0hK3lngrjnCAYbcNy/NjtzAmBQ+m3IpnPyIW52Lu:Jh+0hK3lnubCAY44htz3Q+m3Iy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "188dc6c0-0330-49d1-ac35-60320745488f", "value": 610664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "65ddecc9-d9fa-437a-b4e9-4ac28ce62e42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5f5d59-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ea7adfec-801b-4a10-8f34-9a2c8f739c58", "comment": "Malware payload (Mirai)", "value": "6623d63b070f09b7569928cba3bf4b6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "667d9181-c2a6-4055-ba50-a46acd8e111d", "comment": "Malware payload (Mirai)", "value": "bd147e92c4e1523d5f6a0e7d78629544d663daa80dd2ed5b641a03cee023fb85", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "50572310-a6f2-4056-8891-d8dba635f23b", "value": "T1EC058D63B7318F68E761D27504E3C7619A9520A30BE291C6D37CC6207A50A6D6C6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "b7c4e812-16b0-4929-817d-13fdec7c8cbf", "value": "24576:n0XrR+zvMuS+VnxGm4UZGl/FCaemcdTr70M8L:n6rR+zvMuS+n4UU/FqmwTr7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "d96d047a-0990-437a-9c60-ad3850c725c1", "value": 860516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "31976609-d1f1-49e9-9000-bf630ff5eca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad67e677-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "2fe4f364-4d66-4edf-ac92-8a1caaf7e24c", "comment": "Malware payload (Mirai)", "value": "42bd4ce7cd8679a3a4776640c0605b50", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "16bfe0f9-c5fa-4dcb-a171-2d688a18f50f", "comment": "Malware payload (Mirai)", "value": "b0639df38f2df3d40f9ae6f26f564dfc69dd581a29c079ff28a0dbb6abe0233d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "604f9d03-78d7-4faa-bbb3-840f9dbd46cc", "value": "T14F259E89D7C7D4E1F15300F5068FC7B60534A2265013FAF6EB8CAA767472B626E472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "3c2c74a1-2712-4bbf-99f9-3ec640331a8c", "value": "24576:uNUxtYja/EBxb2KYvhTbhhyNj8uDlExIalnyxPv4PX1KI1m4lsH/pRzjWk/7v:WYvhTbhqgy5alov4iRhWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921858, "uuid": "ce9a613a-d740-4155-a3ad-f5c734e9cb17", "value": 1025584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921858, "uuid": "ccb46ee4-a943-4973-89ce-5ed329a44af9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad8f9dcb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "648f934c-75de-4bf1-8dfa-68708270ec0f", "comment": "Malware payload (Mirai)", "value": "039c4ac687f3ec6ba9d5f59f9bf4ff27", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "4a6840e7-d350-49c2-a6c2-2f0b46f5bbc5", "comment": "Malware payload (Mirai)", "value": "bd050d8a5106f5358ed93361cc5102da65cdc7a83a62369ec3efb73ead20da9a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "55ba1582-3b54-4a68-9d29-40b05fde7433", "value": "T1FC359C2AB2B3B1BDD007C03447DBCAA15531F0755A322D7F27C4DA393EA6DA41369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "bad4670a-1bfd-406f-aa48-801b82c8fcba", "value": "24576:s1sz9AUJNgtsQXAZlK4QxDPYQl4aMZWL+U:su9JJNgeQKKrDbClZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921859, "uuid": "b83270e0-a908-4795-a7d0-0860ef72df4e", "value": 1064752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "597faf77-829f-4f4c-a307-1f553dd48c05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adabae94-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "2ded4c14-5acf-4b05-be20-47aa7d8da53b", "comment": "Malware payload (Mirai)", "value": "be180b3b72ab2eebcf4b6155e4958a9c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "3cf58608-1646-4613-9e20-8166097ebf73", "comment": "Malware payload (Mirai)", "value": "cf12f242edcaa19f3e4c4e46674a4e9b73f555564ecf41f1f7c6e82ccfe73afc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "826b3edb-f67f-49da-99d4-0d0c4a5a5cd0", "value": "T17CF43B56F880DF62C5D0257AFA5F42A8331747B5C3DB720699189B383BD786F0B3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "e33923a3-2c8b-4fbf-b1bc-edbe2e0df926", "value": "12288:aSN10AJpEl5Zbp4bntM6TwFGRAL0d5QcU1xgpQfFmheSKZu2IFejLIqG:3Yl5ZbpituzLI59UTQQ7u2IcjLIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921859, "uuid": "83631e7b-f7a3-494d-a81e-511f4152c1ce", "value": 744376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "929ca51a-ad1a-4eb5-b8ca-76ce116118cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adc6bf3b-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "0e95280b-40d2-4803-8dfb-01f1d53c9a52", "comment": "Malware payload (Mirai)", "value": "a5498d8578ed4d5b0f5019fe8f1eeaad", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "91c63098-84ff-4fb4-82f5-05936c464729", "comment": "Malware payload (Mirai)", "value": "51657c1258de764c1995bd37d0bc2e7c19671d64a49f1db8be4be464901df74b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "45bdf3c0-e643-4485-be55-35bce43ea0f7", "value": "T1E4B47E59FD4D3D82E2C7F27CDE8A83A1712BB1E4D36381A37591421DD9C6AEECBA01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "8a5682de-1aa8-40b3-9434-b40ca1828601", "value": "6144:ixk1fB/S49waOvzGffupuA+foxa8TxGyimpwotDchTr/5rHuXkw5EEx/C:ix4/D/Ovzs6XXxr0mphSp7w5EExq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921859, "uuid": "1660c2a6-cae0-4acb-8008-019928d3b71f", "value": 531784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "d512185e-3bae-4e83-8c12-f85c3a12bd6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adcd0b76-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "9679ddf6-8472-44ee-8fe4-fd5e9fdf6c4b", "comment": "Malware payload (Mirai)", "value": "ce9c116f2fba02a18926ed4dcb241c0a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "3eaa425c-6bb7-4eee-8cd8-3838b6e2e5c6", "comment": "Malware payload (Mirai)", "value": "486d6a6ea06b50c6ea7609458a8c2795c1ebcf824606e85ffc93320a61090669", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "05dae7a3-1929-4e02-906d-d29ee86cb4ec", "value": "T157055B0AEF941FEBC4EFCE35891E830705ED958306C2A634A1BCC95CFA8D65A4BC75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "ee1a5e4d-acc1-4002-9133-c88911dd0771", "value": "24576:eOwIIM7P6ktUfXq3TfSc+H1azPrSTr70M8:diM7Yq3fGdTr7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921859, "uuid": "bffc5566-0bb6-4f01-b06e-804b0b05d795", "value": 860516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921859, "uuid": "4a22e9c2-6617-408b-b6e8-1110f906d1f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7e6bda-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1776921862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "065a7153-d397-4691-af85-393c07ab178c", "comment": "Malware payload (MassLogger)", "value": "91b2420da18f82c5792497425425c03e", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "e14b1c9d-bff1-493f-93df-1039d5671d48", "comment": "Malware payload (MassLogger)", "value": "e7fcb6ab49296e69d1aa94091bb639a8ab3f69823ada857ab7fd5b3457a41867", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "7500b4e6-34f6-4d37-8158-f4f84ee95bcf", "value": "T105144A2833EC4A14E2BFCFB995B090140672F4ABEC16E79D5D9620EC2D727469861F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "ab6a273d-99e7-481f-b978-19060fa426c4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "557414b7-b2f1-45b6-b065-9404e7f5b59c", "value": "3072:3BCBaxeImUupz/qWyPQjs0503fvaJBCIzG0:3UpUjWyPT37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921862, "uuid": "929938de-5438-42ef-ba37-11da6705e1a8", "value": 206336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "2b7d3dc2-d705-4e5f-bdd6-44a804b85a3e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af89b6cb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776921862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "9cf2ec9c-a187-4445-aa25-fd0667589daa", "comment": "Malware payload", "value": "44f2035176cf3e5e11312a83448908d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "21aad85e-615f-478f-890a-7c24a521eaba", "comment": "Malware payload", "value": "732342a486ec8390cf8931594ca700b089ed7eabfd665937ab033e2de2358bf8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "030c1014-5570-48b7-8d98-1afb2f4c0fef", "value": "T181E5233D335911A0F9BBF138CA46A7ABD2F1F4468391A79F1B645A251F13924F22E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "a016a392-b2fd-4e6c-ac37-2f70564d6151", "value": "f9401bbcaa2d2eaf5c403413d9baa00a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "aa533820-9ee2-4c51-92e2-b63577dec621", "value": "49152:BLL7CvcdzuhP/7Piky+4Vgjyks2Ljw+SZXSKbVtK2OwiPiq/4qBrwoLkAVA2mq:BWv6I7arHD0jwbZCAt06Gpdk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921862, "uuid": "4a377885-81de-49b4-9e9e-4e1ccec68a11", "value": 3047424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "13ad0c8e-a234-4f2e-83ad-2e39bc89766e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afaaf71d-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (ChromElevator)", "timestamp": 1776921862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "1f465bf9-ccf3-4c10-82bb-196140924e95", "comment": "Malware payload (ChromElevator)", "value": "2bf1f1e9092b4a535fa4ae2c9fe5c132", "object_relation": "md5", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "76aa08bf-856d-4b2c-8f57-af2e66b1ffbb", "comment": "Malware payload (ChromElevator)", "value": "ee8e43b6be1f405fdddb1d5f035734f154a5e23c5476102786bb2329d1f30ad9", "object_relation": "sha256", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "7b56774b-865b-4c64-8d74-de14192bc20b", "value": "T1B3F523162AA40CFDE9774A7ECA674609DAB1BD4247A1EACF43B546864F13BF05D3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "59e1defa-3711-47ce-8c41-750addd60497", "value": "98236a5bb699888899f60e3bbfa36dcf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "9174a2fa-6f83-419b-b94c-8488103865f6", "value": "98304:BOXZ6of21SRag8czOGUMx1bO5HwG1t4VeGvXRZXPt1:4y1Swg8czzx1bO5p740gjXV1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921862, "uuid": "3cc844eb-ff36-41ed-89a7-19f176d5dc43", "value": 3463641, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921862, "uuid": "9f3fe5ae-f302-492e-9f27-21dd6a94df35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfbb21fd-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ladvix)", "timestamp": 1776921916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "71a27b6a-0b94-428a-9a1b-b0cc0d976dd7", "comment": "Malware payload (Ladvix)", "value": "641ce036a308dc4df7a63ccdb142e71f", "object_relation": "md5", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "9ac46aa4-0035-4b62-b6b8-4f99cacb43ba", "comment": "Malware payload (Ladvix)", "value": "455ab200b69db0f3d04203b7468eff43e328375510211400c2583e8063e6568a", "object_relation": "sha256", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "53c7ad34-91d0-4ec0-880d-5e1f92d8c64e", "value": "T14CC2D80AB791CD3EC4CAC330589B867875B4A0F4EB2393273744777929427989F1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "f62f8edb-3e9d-4ce7-9b88-6ee4d4b16390", "value": "192:RnxzjwsWskaDanX6JENuZYhz0h+fcfLBjDSc8CkjPnktjmEH/6Ru4HI2E2jMixV3:BWskamFsqGhR9jBkrkUw/eVEIV6uD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921916, "uuid": "11cdbf1f-7546-46b2-ac00-5fa0d5e4c7cd", "value": 26391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "1044d0b5-33d2-420d-9e46-44f6da1b5df1", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cff4a521-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "cc8a762f-8ef4-49a9-8ea3-b1c0d788ffe7", "comment": "Malware payload (Mirai)", "value": "4ff8e5477950a24fee9cbbc8b3a63ae7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "4b681ecb-40f8-44fa-9a76-9b72d2c8f3dc", "comment": "Malware payload (Mirai)", "value": "b95415f0036409418073ef58d81ace9a00cfae0f942a4f7e9e90b2b54764a554", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "da7d22fc-db02-4203-b8f0-30a75daab04a", "value": "T190834A17798080FCC49AC17847AF713AC472B53E123DB2AA6BD4EF263D49E201F2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "cf3609a4-056c-4a9c-8984-867d5f8c97cf", "value": "1536:+JtlNc/hpugE6QTqnnrfN8SaIP+mYpQINtavyn3IJELqQu+ojOZUS:UlNc/HugdQmnj+mWm0QIGvynGELJu+oa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921916, "uuid": "97a33eab-b99f-409f-bc2c-ff7139299c07", "value": 81648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "e812ad70-a125-4786-bde8-ae3b3469a2ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0072d91-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "0d552aa4-0c0a-429c-a248-8e82be024200", "comment": "Malware payload (Mirai)", "value": "c5e8cf509e07121a82549b108a16360b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "bf0ab117-a230-4cc3-82c3-e4018a38cfbb", "comment": "Malware payload (Mirai)", "value": "c3eb3129e2e726e3adb37785c3799ee79a44e51edcd3467ee305d30f596596d9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "2050f74c-122e-41c1-b0c2-5a97064cbc0f", "value": "T11D833A80F987C4F5E95B083040A7F23FCF31E9699070C66DEF9ADE35DA67640931A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "4918ed27-9427-46b6-b90a-47650ea4543a", "value": "1536:zxe/A97rFwfBrlTjz/MGfdAlHq1aZ9G6/2jULWJGoWCQ1JJRcYPeKbzm:zxea7rFwfB5TP/fdAlTn5/2A2kX1J3Fo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921916, "uuid": "195b4c25-cbac-4eef-a3fa-cc44da4abdf3", "value": 83020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "b8553f4e-67d3-47c3-b59d-6f574a042c5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d00cb645-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "d4f95a5e-2dff-4af5-a8ff-ee1d47ca308e", "comment": "Malware payload (Mirai)", "value": "706c25210d5136db0e50f2a5ebbbdc01", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "c31b8b57-4000-4e15-867b-3c6477b41883", "comment": "Malware payload (Mirai)", "value": "91d0add02f99417319e40069337fbbd13b75982b9a33554bf06e39f85719517f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "30104253-85b0-4703-a2ac-098a227d33f8", "value": "T157739D63D8397D64E15406B4B0B48E344B73E59085572FFAA56AC379E08BEECF1093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "4054b2cb-c31b-4097-97dc-930a984ef701", "value": "1536:ZaI/M/DDeEHxVNhkRWoNdO5aKLJ9sL1E8PXCZD+Z:ZZUXtqRPO59L+1hPXh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921916, "uuid": "f731a2b0-0d1a-43b7-996d-32662f4966eb", "value": 79236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921916, "uuid": "3c51c1eb-287f-4366-8af2-6e99dc672175", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d012bdd8-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "789919de-8b91-4415-a7af-1618a132974e", "comment": "Malware payload (CoinMiner)", "value": "9f47467f2aa4eede92ac5eee20d42fda", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "39b28b76-f6b5-4c7f-b4bf-74c7a9e0514d", "comment": "Malware payload (CoinMiner)", "value": "75a2724ca85cc22ced6fa434683d4be11ac2c71469104933128a91ed72e5e0bf", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "301c8b37-e4f9-42c6-b6be-43faf01465da", "value": "T15F26336A6283FB65F4D33BBA9B1E35194941F32D3EA4C20A4676C344F9431E33C9E4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "d9fff829-6de5-4610-849a-3d41e4825859", "value": "e3670f1fbea1791ca90fd04ade895071", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "1a25664b-e0f9-4236-89fb-994a7badb414", "value": "98304:vkdh9O/i4UkL3v67jWJk5ObIwR8m82Td5lrJVFbJWc+U:cd3yi49LfyEkUbl7LAc+U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "05745a78-c2d8-48ad-a277-c07e438dcdbe", "value": 4851200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "fe5feb94-c37f-4c67-9c6b-da0c7fcde2fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d01d72c2-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "9c02ad97-53a5-4f5a-9515-30dccca04a92", "comment": "Malware payload (Mirai)", "value": "d0521263a1cbed32848402fb09f0af49", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "47ffaebf-b9fe-4bb2-aff8-7ca95fd7b53f", "comment": "Malware payload (Mirai)", "value": "210e8a1fa9028c2033d96783b55ec1382f4d2348b5ee87e01ab1c45b781eae96", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "f1aeb657-b74f-48a6-bd3a-0d3dde49432f", "value": "T160832A46BC919A12CAD413B7FB1E418C372663B9D2EE32039D215F6173CB86F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "f4bf9413-6790-4684-a001-ae91c8da2a94", "value": "1536:QiIhBaGfRYL8kYdHRw1ODcxKBWHR1KNtlLIAVFFxE1XBcI:QiIhBa2RYzpJ9R1otlFV1ElBv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "e2c84d73-7987-4bf0-bd9e-5cb781640fe2", "value": 87360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "74cff648-6bb1-4fe6-9aec-aa98d8c40919", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d02ad39f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "73fdbe33-a1e8-416c-9b95-83ba2449db5e", "comment": "Malware payload (Mirai)", "value": "b118e834fec0ad48371f44db4bd9ecaa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "2e136118-437d-4df2-afc0-02b6fdb29cd6", "comment": "Malware payload (Mirai)", "value": "08e93631f4155943f97de0bcce6e3944de64011f1dd3e0bdec976490bdd1f8de", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "953fc7e0-f6a1-4a8a-84ae-8216e8972c7c", "value": "T189B3C409BB610EFBE8ABDD3746E9170625CC642B22A93F357534D828F14B18B1AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "c74cd040-c3a2-4fbe-a8e5-2c4f3b25c8b8", "value": "1536:YT086zk9CpaST45coEkP5EZC4gN+P4MrZv9dizMdSZD6FWX3COc:Yo86zk9CF88kuh9diz4SUKX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "01e80aa3-b8d2-4097-b468-eba9ca5db711", "value": 115548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "c22b3b3e-c41c-476b-8263-c533a6fea979", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d02c3cbb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "539f3e35-f40b-418a-b8c6-d75da3a67c7a", "comment": "Malware payload (Mirai)", "value": "e44efc9aba985364d9a80a261f9dac4c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "f86c078f-c993-4fb2-9285-b15f486757a2", "comment": "Malware payload (Mirai)", "value": "6463214cc5012bdfd2dddf506b2f0ef3d3646892b16ab7e23e920a67a2e1619d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "3b6b493d-e298-4539-bfd7-2bf425a153e1", "value": "T18E343913B89080FEC496C2789FEFA136DA26B84DA034B12E27957F163D59F30AB5D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "5858a297-5271-40bc-806a-7757f8accbaa", "value": "3072:TjZC3bdk2oT5dW+CNYE5/2ClH/mXkl48qdtrkG45ZcUJRahp257bA+tQk9kPfu/r:ULiF5dW+CN35/XlfB4D0T5WEt7b+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "12649602-d306-4374-b23c-cbe10c84f9fb", "value": 239304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "119ac1c3-8885-4ba6-bb86-014c021264ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d036bb2e-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "72546a51-447c-45cc-948e-e6e9869ad834", "comment": "Malware payload (Mirai)", "value": "bafe193b32ad71b12964de74d960bc8e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "21454375-68a5-426b-901d-5dad8cbeb727", "comment": "Malware payload (Mirai)", "value": "86e681687a7d917f439dd137b1f5b991faa75b6fd4a344b92c3e890165416cfb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "d64616b4-b930-4aef-bcab-685a5742d336", "value": "T1B9144C47EB818A13C4C61775B69F02453323EB64D3EB73069928BFB43F8679E4E625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "78ac0111-8b90-4061-9b13-654a99595369", "value": "6144:cKPdmDgolUba4/2KwDiWppMjonH8sC8mk3/0t3:cKgZUba4/2KwDiWp+oRrmkv0t3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "a0ba6317-b107-4d3d-b223-a2a321d7c500", "value": 196817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "4a71e4e2-e03a-4b7b-848c-cef9800a8a40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0397db1-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "acbb119d-b0f7-4e6a-9355-dca47176895b", "comment": "Malware payload (Mirai)", "value": "8b47077caf9a6f1789ab942d802e7e53", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "83b0dc6c-669f-4d99-a009-3cbf915b3ef0", "comment": "Malware payload (Mirai)", "value": "cdf7b1390e49054b60139cb38866806c619321dac16b7d680aa5902d28101cab", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "75bbd7c2-1f31-4da8-a4f0-6bb3707ee7cc", "value": "T1CB736DCAE683D8F5FC1705702036EB335B76F53E1029DA83D7A9AA32DD82511E6163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "12681a52-9f9d-497f-910b-a4eb06c68fcb", "value": "1536:3V4mt4FjWkk/q87TiYeJ1LV4rxTyK+ZmVW8ID93S5XRP:l4mt4Fjtk/pHiGrxTWZv8Kst", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "6116eef9-8552-4cb9-8b32-e505060b647a", "value": 74956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "6209fbf8-5520-43f1-9743-3c8c4123dcc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d041f04f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "8ebadc09-6a50-4a12-9823-87d8d8a1bf43", "comment": "Malware payload (Mirai)", "value": "6ddfd761fe5515aaef60afaf5d86ade8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "df8baa2f-fd2f-4272-bdeb-e3215028ec41", "comment": "Malware payload (Mirai)", "value": "ff9400d6f811efde411f7491cf415e385c11575e3f525df086578378c1366dd9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "4e72d360-418d-4904-a20a-58bb5897c12a", "value": "T121C3AE97B74B6590C86242F40BCB5F9D2E3321128F6F98EB2C1E667B197D0CB4D163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "3db32128-3c6d-46ab-a66f-1157f01620da", "value": "1536:cAxG1ArEVSeMy8gtXdykTWPobwhNvPOg/lkhqHXmX/LWq:c0G2rnjgtXdykTaq4vPOg/JHXmXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "108b85db-b4f8-462b-bbd0-7b379de26117", "value": 124184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "beff0846-058a-4bc3-8bf5-677ad8a737bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d04b0207-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "f9bf5ad6-b561-46e0-934d-ea6ad215b33a", "comment": "Malware payload (Mirai)", "value": "046f869fc6de3a27f9cc58e021b6a972", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "af9ad93a-59c8-4003-9a88-b302462e3c13", "comment": "Malware payload (Mirai)", "value": "ed4d63c971c571466b92a24d8aedf820eb39c380aad90e3c17b3ec029a83c7cd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "8a511c7a-ef54-4574-8b7f-534aa6e833c9", "value": "T156B3B74E6E318F7CFBA8C33857B74E21A35833D626E1C685E16CD6011E6024E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "dc2780de-1f34-4154-a98e-5bf23e81b1c8", "value": "3072:xTe1KyHpLXtdrOCaOsPI7ReCzwrj5/aaNpS:xkLlddrOCaO8I7ReCkZiaS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "e2eef0ca-a7d2-427f-b23f-50c0ad83701f", "value": 113996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "91359b4a-d9a0-4e72-ba3b-5cfb7d51346e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0576f18-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "858be74d-4f2c-4941-b270-f8e1bf112d31", "comment": "Malware payload (Mirai)", "value": "969f638bca72f89611e53a1440ef6187", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "2f12ad7e-df4f-4ea2-b6cf-78d08988604b", "comment": "Malware payload (Mirai)", "value": "cca80bab4ef27cd9701b35576d4f1315181808a8c6ffca242420ee9e7a1ad9b2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "a167a285-0d36-4446-800a-abc290121868", "value": "T1AC143B46EB818A13C4C61775B6AF42453323EB64D3EB73068928BFB43F8779E4E625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "663c5ec4-35aa-4eb6-9fbc-cf91ee6dc5d0", "value": "6144:cKPdmDgolUba4/2KwDiWppMjdnHCL/K8mk3/0t3:cKgZUba4/2KwDiWp+do/jmkv0t3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "865e85ec-52a8-46e8-a9ab-e10886138a04", "value": 196817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "666e2d17-dc15-4179-bdf7-39557d4d20a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d05c2006-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "9cc8a343-1b60-4641-93fa-70965ab88751", "comment": "Malware payload (Mirai)", "value": "521babc4f7677fd52f2e50c51d7bf983", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "3cc69cef-9ba7-4f2b-b6d6-4f059b9d2027", "comment": "Malware payload (Mirai)", "value": "2f81b22bfa926844d3cca95998cc3fbd14665e1997b205c7ed29dfceb43438a4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "199e0385-94f7-4a67-aadc-615675a799fc", "value": "T1D9933A95BC819613CAC513B7FB1E028D372623F8D2EE32079E215F6173CA96B0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "46df7b0d-eba6-4ec7-a202-fc8fe25b863a", "value": "1536:7GxjzZ7ML/nt2UAHexEmWJdh6w/CvYfD4dGGfRK6kEYlNEsaPPmQsu:7GxPlMLUiZY0tRK9lNz+9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "d6d5547c-3ed9-43a2-ab11-a5abac2e1910", "value": 91872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "88adc3fd-313e-4e27-9155-b072a2859557", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d05d9739-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "b2e549d7-499a-4b95-a469-c571b83be163", "comment": "Malware payload", "value": "29c61c771f18027c0a63ef41e57f7e50", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "cf377970-a041-4746-857f-6540f5222a79", "comment": "Malware payload", "value": "7405117e8903bea1f4a641f74e1b7b208ac70d74971cc668cec63bcd2f81d64a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "54538302-570d-4cb5-9898-df72a9154596", "value": "T127E0868A365120D38D2CBF04F83B46A46485B3C030704724359B6665D4A46403860F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "e452f147-4411-416c-ba33-902c05c2ad79", "value": "6:hoMY5yMLol6B9LDCa0LKi6B9qxkICB9LfHW0XBUA:rY5PolqVDCa0LKjsCJfpUA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "02d31eab-22ca-4dcf-b95c-d01e0b8b65ad", "value": 298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "ea1d96a9-55f6-4f9c-8407-9de9b190ce07", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0615a1a-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "65598fcf-34f9-48ce-8bdc-f7edfdff1c8b", "comment": "Malware payload (Mirai)", "value": "86a969b6fd2b8a1f31c3d4ce491a7cd6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "b387e658-e1e9-4ebd-bd9c-55838289638d", "comment": "Malware payload (Mirai)", "value": "d60d73d0751958c86cb56b46fadc0dec8d979c56e4521cf0ba19695c9932e008", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "7ee355e6-febd-404b-83ad-5ae0394f4085", "value": "T1BDF43A69BC419795D6D02ABEFF6E838973131B7CE3EF7102DD045B253BDA85A0E2A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "67c18999-9282-4c9c-a706-99240e818749", "value": "12288:91YPz/fS1kjvj00xUCV9+zq5YXddstCiuIspSh6bzavGo/WsBkuIdjr4dBXlyKcP:wYezMI6v/oep7sXl+ZKNnMoP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "ca4ffb47-9bd7-48d3-8887-1637201a3c1a", "value": 774080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "9a830f87-1de6-48eb-ae65-ddb095fb317a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0623c9c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "3675f7bf-3830-45ec-a7a9-80c0f415fe96", "comment": "Malware payload (Mirai)", "value": "df87b1ad2d0849f5234a0175d2d1f263", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d40b4dca-68cf-408a-a474-1a8f8595ead9", "comment": "Malware payload (Mirai)", "value": "2cc3728ebc8fe1c12ccd199a39ac68748fe524290a4806b3ecca59b40760c6c8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "63f673ff-1c69-44e2-8350-5acc8ffa0728", "value": "T187F43925BD019796C6D06ABBFFAE838C7313177CD2EF7103D90547253AEA85A0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "b834b3d9-f560-495c-a7b6-115eb45dc3b5", "value": "12288:V+1RBTzI7CDHvE/NY/mPpBqS6MGxS8MyXZf3wokwDDFlhDqBTwI1X94Qs/n8u0ni:MPSP1gkNnljiLoDSWbTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "0a1662c4-599a-4770-ac41-8af1d2867057", "value": 773688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "389116b2-3124-4ff4-a44e-3dd849a5a23e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d063e53e-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "e50d27d0-fb12-41b7-8fb9-184ccfd5b427", "comment": "Malware payload", "value": "f56d2f7735f1b78e609418520e9ff38d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "00cd4d1e-4050-485b-b908-3c1763ba251a", "comment": "Malware payload", "value": "14af37d9144376e64ca3e13da72a066c9490c299104bd418a4a40fd8f3fa6bfd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "34ab85c5-5a70-492e-906c-69303f8fd3f9", "value": "T1C9E086CA365520939A2CBF08F03AD3AC6481B3C070B04A50B02AA664D4A46403851B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "84998e38-713f-471f-af28-9800853408c2", "value": "6:hoMY5y3dJS6BQdma0LKi6BQakICBQVRBW0XBUR:rY56dIqQdma0LKjQECQVpUR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "eb7a06e1-3946-401b-904c-bad6d57c5fff", "value": 296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "067e8b26-a14a-48ef-a396-828360616053", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d08195b6-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "ec0dbcaa-4e5b-4167-92ae-0aeb86593630", "comment": "Malware payload (Mirai)", "value": "2c63217c4c7e32467aa3bc8b0dc0d3ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "ff6da67c-45f6-4fed-ae98-e43802f15e78", "comment": "Malware payload (Mirai)", "value": "ddfe0a230c58e1bd0d6e6024fa096a2da30f6ee494634dd77e88566543b2bf56", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "fd704258-53f2-45b2-a717-1f46ac945ea3", "value": "T14C35190AAF500DFBD82BCD3706B95B1624CD684362953F367538DA04BD5AA0F5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "23a1accd-3e2a-447f-9cbe-0ed8cf8a0266", "value": "12288:3OfdVW8/AAcAbw6lBTqmlZyeQbq99Mwv4MK04JRIgd7:efdVWlAcAU6vRlZpQ+9Owv4T049", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "29e96ce0-f892-487d-9afb-860d138478b4", "value": 1058620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "6f7093f4-09ca-42df-835b-48d94c7c6f26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d08fed7a-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776921917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "e8b2bfcc-e3d8-4b9a-b7fd-8624552ee8a5", "comment": "Malware payload (Mirai)", "value": "75b70444b679bb93f316181b3971714b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "1a9346ff-876e-4783-b13b-6906dd1d0702", "comment": "Malware payload (Mirai)", "value": "2a06ab5f85c8f7e5ceafcdbee909bb0898a97d83077b7a89df7fa7d8e2d3ff4d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "f802162f-4716-4743-9fde-166f6ff8a9fe", "value": "T1F925095B2E328F5DF270CA358AF30964DAA833D717E18585D1ECE5241E20A4F951FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "69f4d441-41a0-479e-88fa-0505ea372ec1", "value": "12288:Sd9D+W/tMvhEpgqZIpadLkVpeeZ4QDh0ne8F4ByfHNdvGBm9xdoh6I0m8EJIPy1R:SdzPl1ezmcI94mTd9TicSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776921917, "uuid": "3a39ee97-8c35-462c-8091-c1eca5fd6ebb", "value": 1005912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921917, "uuid": "ecf76c55-6501-4790-8fd8-ff98b09de010", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3889c102-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776922092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "f9b1d25f-54fd-44c0-b628-49de04a1612f", "comment": "Malware payload", "value": "8fc8192dac1e12a123f026d5096e4361", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "e6028d1a-7ada-490f-a300-3a13ce099430", "comment": "Malware payload", "value": "027aaeaf98eb489e201cc68df1a97856d8f249b7dc8708bf590c98d6423517ab", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "9c5fef8a-425d-4e4e-9cb7-0b2573bd6e87", "value": "T15BD4E0DA8B1AF72D6148ED4CD1D22568FCCC7D88558EF95FA811B002BC0D78A71B6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "5bee5085-707f-443b-a576-dfdce2473cc4", "value": "12288:8Qj/3q15cd+M2QaHsyTRDj2qn4KJvW63DiSWoJgJoArXRvq/MBw:8Qj/3q/cdiVTRDjB4KJO63mSv2HNy/2w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776922092, "uuid": "4167c973-b2bf-4bc5-af87-ab4097c607b6", "value": 638976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "70617d39-9a43-42cc-bd73-597d5b91f2f5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38d788dc-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776922092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "98918067-24f1-448f-80b6-b17c4f0c720f", "comment": "Malware payload", "value": "4847fd40233577bb426c30a3ebca700c", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "8e4d8d9a-33c3-41c7-ab7e-3f50b883a5b1", "comment": "Malware payload", "value": "dcb45b07e6c6a511effcaf3132883a67df7054151ee8a32cf411631382bf8d77", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "7488243e-d0ff-4c51-80d8-6760aa0b3a31", "value": "T17F052319884D5570FDFEE582A68A9EA40F1EEBC85BF99348DC1F030D1C6127B67CD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "64bf54d4-21fd-410e-85bb-c8e38a24f211", "value": "24576:e72mthPFHj7NlVdBhjHTohpE8RZg4X1Nk:e7Jv7r6+8YkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776922092, "uuid": "c44a2c44-0b99-448b-9b18-bb148221b378", "value": 809655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922092, "uuid": "3da1ab5b-bdda-412e-8a6d-6977532331c9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0bba0cd-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776922320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922320, "uuid": "f2cfe77b-9ce2-4478-ade5-97ebfe99c233", "comment": "Malware payload", "value": "e3d78961aad6770b51a00c081b501e1b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922320, "uuid": "dd66b34d-c1c3-4c32-a346-a65064030a40", "comment": "Malware payload", "value": "9318610346971fb5f2932c4e7062754d1600aeb69e0ce9c385a05900daee9d23", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922320, "uuid": "58fbdda0-f8ea-453d-b78f-3453adde4282", "value": "T12BD3F1CD5ADECCA89F1F1498851F6C07864C96270A1DD9A17EEEAE483F136B834F94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922320, "uuid": "c9c6e7c9-2f71-48bf-8b64-8928f50adfbd", "value": "768:5KMliNO81PrSI6BkTLPVcf2eIM8r53Y7bvhkZE7l599uo+uxvULljPo5k:Q0iNNa77W85k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776922320, "uuid": "4a2ec331-9cc7-483b-81d7-4878c0a847a5", "value": 131336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922320, "uuid": "92e44394-53cd-48ec-a17a-f275d4a91aeb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a08d7d2e-3ed6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776922696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922696, "uuid": "01575f73-84ec-4a69-abc6-ae569ce733f7", "comment": "Malware payload (Mirai)", "value": "4359938183d56823d0db647a0471fa47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922696, "uuid": "d1e865c0-8f41-400c-95be-18d5e4af152e", "comment": "Malware payload (Mirai)", "value": "a09242343f0ce8bcdb0aa675c660e5fff1baef86ffb045e8795b314d82e665f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922696, "uuid": "daf81749-2bf2-46d4-b068-5be46e4b97d2", "value": "T1CAA2E019BF58828BC832797455D9E5D21257FCA1F29DCC4D2940C15FF0A33A96434F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922696, "uuid": "d2984997-1b23-4e90-85f9-cbfc7d92cd48", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTV:798o08kxofBE+ZkXaITbp2F2TWul0c5B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776922696, "uuid": "e10d3891-9290-4fb0-bcb6-940b9a7b4b6f", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922696, "uuid": "12687a82-531a-4150-a335-57da1c528a92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edf05adc-3ed7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776923255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923255, "uuid": "a083181c-5400-4eee-8505-7bfd92828ca1", "comment": "Malware payload (Mirai)", "value": "f9aed0dcc89bf0602b53b6fec3994d4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923255, "uuid": "27b8b3f1-239c-4532-91ce-faef498c1c41", "comment": "Malware payload (Mirai)", "value": "9ad35547002ed05bcb1a61955b6032eb484531c0316b10b230fe3adb4ef4a932", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923255, "uuid": "9ae796df-f3ae-4176-b736-da642ff8a930", "value": "T11F432921B53A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923255, "uuid": "0184c9be-5152-43ce-acb4-11644c362c95", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwz:RqtmZPuutfbltZFBSJsBcfDSTFI+BEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923255, "uuid": "00368358-1493-49d3-963d-1ed46f5ea008", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923255, "uuid": "19cdab59-abfc-4c76-8c01-d2091298fbf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ec06d4-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776923448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923448, "uuid": "1b8f5bad-9d75-4f3c-b3a0-af608e701a2f", "comment": "Malware payload (Mirai)", "value": "56b6079c310a8d199bced56569d54507", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923448, "uuid": "a273d91a-7a07-4d0b-9a76-9d1ebee75bf3", "comment": "Malware payload (Mirai)", "value": "88321b2c21e5b8ae88d0fe114e6331df4633177ba923e91113f66878693a830d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923448, "uuid": "39d62c87-f325-46f3-9e0c-303b3147d765", "value": "T13AF3C50E6E198F7CF79987344BB79E32925833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923448, "uuid": "44efa54b-e1f5-47c4-8609-93b8a5426d3a", "value": "3072:gOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwZ:gOATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923448, "uuid": "caf7d7ff-dd3d-40be-affa-7cb06220e921", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923448, "uuid": "ba1f8a30-38bb-433a-aa94-8ceec56afcd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6534b6f4-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776923455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923455, "uuid": "8e35e4d6-5291-4355-b9d5-94865d8c0a8d", "comment": "Malware payload (Mirai)", "value": "7bbe22804f237d3693c4c17476d1d583", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923455, "uuid": "bbd9e0a3-1e0c-435e-86d0-a02c6d4c99f0", "comment": "Malware payload (Mirai)", "value": "2661887f7bbbf424b1e89e51d76049610e1b62d051300a15a1bdd03087170b44", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923455, "uuid": "8a552a02-c2f2-40f7-ba41-6f17c2242901", "value": "T1DED34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923455, "uuid": "1970acd3-44f4-4684-8e5c-bc1f1869f565", "value": "3072:loldeCsOs9kzj2vV4XcZgqniE230IO1BlsT3j0A:KPeCK9kzivVYQitymTT0A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923455, "uuid": "0789eae7-202e-4b93-aa1d-e27e4be15cb7", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923455, "uuid": "6b396b00-7eb2-4a7e-8e5f-55fabd4516a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc4f8070-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776923601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923601, "uuid": "70913c12-a552-4ae9-9fe2-45db36bc5d84", "comment": "Malware payload (Mirai)", "value": "79db653d69619cb4dcc7627e29493c4e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923601, "uuid": "78f4d443-2520-49c5-9a48-732705f3558b", "comment": "Malware payload (Mirai)", "value": "00a3fc9e594aabafbb6998f3f10e1fce34dcb923bfa4b3b22ca3fa9986dc1c89", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923601, "uuid": "f339dc62-554b-4cc0-84d0-f6789f78d925", "value": "T1BD041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923601, "uuid": "ebd4fed5-76d7-4514-9389-3c2643f4a26e", "value": "3072:t+0NrtUpT/5dltGgXGGP9M4S8lrXwU2wonacrI40fCtZ1SD39rsJj/s9fx49SY2Z:tDnEr5dfHPq7UToac8uF9X0V6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923601, "uuid": "aa036924-fe10-4734-9e29-e1d208547f41", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923601, "uuid": "f7b8b5cd-66bb-44ff-97e1-1563c261bbab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5d7a99a-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776923698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923698, "uuid": "83f04f4e-19f6-4495-b6dd-f36c9111d657", "comment": "Malware payload", "value": "9851befebd1ff16359a5d0c153654c52", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923698, "uuid": "3fa458a8-9175-4eae-afbd-e60ca53fc919", "comment": "Malware payload", "value": "69b2e8295ac11ddab68934674524ebe696bb9c37e4b60c9b96be09a2e2f9f09c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923698, "uuid": "9a8e6cb5-3365-4492-90ec-1db3d896dedc", "value": "T1FED3E1C88D8E88A49B1F3468461F5C5A9A9DF127071DC8A0BEEDDF843F156B075BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923698, "uuid": "903ab932-a3a8-47fc-8300-5cc965745cad", "value": "768:fgZkfPDp+bVGovlNS5eFh4bKXs4G+836p6e6i6B6RgDri4Lgq+XCy0tx0RCLA4wU:ikf19lDji+W23", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923698, "uuid": "fd5971d5-7e3e-4c48-8a67-c29665dce48f", "value": 134901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923698, "uuid": "77ddf9aa-58a3-418b-9ada-4b23e9f79a42", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c446446-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776923762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923762, "uuid": "c5c0b128-e4bb-49b8-bfe5-e9250f83a6ac", "comment": "Malware payload", "value": "7d0defa908726a8aa17a6fcf9c81ae86", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923762, "uuid": "27237c0d-7828-4210-9f23-29dbc54a00e3", "comment": "Malware payload", "value": "efbbe92747b965441968e20d096facf18325e0de97c00361dcac4c5b0e029a82", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923762, "uuid": "9c995acb-7261-4e86-8242-9bc8f2050ad3", "value": "T1DF1612484DBBB1062FCDDB45F39BFFDFB85262A2F941122470AA5DC933A12561C6D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923762, "uuid": "22c06ddf-4725-4d0b-8ec4-723700631819", "value": "49152:qxNmMkld7v68ynY9MsNqCHURDe0GdX81UQWfw5AhEUJ5emvqO62sR5tW2J:A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923762, "uuid": "c436777d-4016-438a-ae4a-4f40461431e3", "value": 4336626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923762, "uuid": "fa64999c-e63a-4904-bfa1-c93992dfe4aa", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b43433c-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776923922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923922, "uuid": "4479df9a-6557-4ea3-b77b-5280e312baa3", "comment": "Malware payload (Mirai)", "value": "e32833321ae7c96b38332d05e7591d1f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923922, "uuid": "eda9bc44-e6c9-438e-82fa-e74a38f55091", "comment": "Malware payload (Mirai)", "value": "08ab2a6793db5049ce4880584ed6d699977bbf10ee59243d5405af30a4020cd2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923922, "uuid": "48dd7764-a70c-42f1-8146-fb5388f42994", "value": "T1EC343B45EA418A13C4D117BAF5AF418A3332A7A5D3DB7306D9246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923922, "uuid": "5a8bdd86-7340-4bde-b81b-d41d17660242", "value": "6144:0go/jNgGzHzakeqacEp1d4n1trkbf9ihM/9+AU:0DhgSHzakeqacE3W1e0G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776923922, "uuid": "a5ca788d-ed64-4877-bed6-1a347495f0ad", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923922, "uuid": "040d992f-48ce-468b-8058-acaf29520a95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d168af7f-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776924066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924066, "uuid": "5ff589d1-542f-48c6-b73e-1228704b7974", "comment": "Malware payload (Mirai)", "value": "71361ab12fdb925b2fa882fc7dafc414", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924066, "uuid": "3f9086b7-3625-4aba-87e1-8c2c586e0c00", "comment": "Malware payload (Mirai)", "value": "d1d86b465f0730bcda495a5e0af0aa66d92556cf14c347f44275c026474fcd66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924066, "uuid": "852e00d9-4250-490f-b762-6444ec93ab6d", "value": "T11DA2D1BFE4D64957DDAAE53B011D00CA50BB5D5413A783C23FA535B389778E8F8366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924066, "uuid": "129e9dc2-5f39-47cc-bebf-9f3d1142f936", "value": "384:MccDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/eW7MM+v1Rpg:NMkKJFH39CBVQey7qsZoMT/7Epg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924066, "uuid": "47cc85b3-bfe2-472d-9ef4-25f52920861d", "value": 22448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924066, "uuid": "23c183e0-1d41-42f1-b755-71edfb95c19d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fc6228c-3eda-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776924332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924332, "uuid": "234b28e7-c9d4-460b-ac47-94a1bbb25983", "comment": "Malware payload (Mirai)", "value": "d3abcf37c4316a3b9897d4e0254259eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924332, "uuid": "44bd50f6-0828-48e2-beff-6430c98db7ed", "comment": "Malware payload (Mirai)", "value": "bed31d4b0314dd737e0c524b98cab1b456d350a583cb9a9227cb843333a9d78b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924332, "uuid": "985e3c38-9904-4eb8-945f-663f7e81b836", "value": "T1F3A2D025D349AEF4DFEF9C9452C1C2C276E987C6278AC8E340FEBF012516046BB89D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924332, "uuid": "8833b700-0694-47ea-9e87-d1f2834753a3", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5bjGM4uVcqgw05VxJv:mRxsSVsMD6xiJJE5zRWNr4uVcqgw099", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924332, "uuid": "67356b4a-2462-4627-9620-06ae03aa919d", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924332, "uuid": "da688b1a-57f7-42cb-a3f2-70c61576582c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b037b735-3eda-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776924440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924440, "uuid": "66a4bf20-6b9c-4d49-a813-42ff0099d888", "comment": "Malware payload (Mirai)", "value": "b21116ebd57d53104614c7bfcf3207c5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924440, "uuid": "915bc87d-71f3-4b63-a44f-4f2f211a1fb1", "comment": "Malware payload (Mirai)", "value": "3d6d40301232f997283b70dc806849fe815b25c7e2422822b953e4321a05a9f3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924440, "uuid": "76107830-93c7-4f27-9dd1-95759e9e105a", "value": "T13CC32902F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924440, "uuid": "c94135fa-0880-4c49-bcda-6398788e2cba", "value": "3072:b483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BeyPBupmzQUAdojgaR/XN:bH3TghM/1weZbcnITeyosFAIxnJdhgJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924440, "uuid": "afa471f4-a38c-445d-9163-d30c7b46e791", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924440, "uuid": "efde8de8-79fd-437b-8c94-ef6daa8c4c57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42759df0-3edb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776924685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924685, "uuid": "22d17b91-6092-4336-948d-2c6f7a5e20bc", "comment": "Malware payload (Mirai)", "value": "02d32ca18339fe4eba66030db1f74724", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924685, "uuid": "f8b30997-50f8-4150-8d56-f441bda0a2ba", "comment": "Malware payload (Mirai)", "value": "3e3a13f953bb69f4d49ab308471ae757f9b0e470b87b58b93b5b2e719eadd764", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924685, "uuid": "80cb9ce3-e2cc-4151-8316-c5badbaf7407", "value": "T183D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924685, "uuid": "c65ae115-3c34-4bb5-8f3d-41dc6b7a4585", "value": "3072:bV0zui1ZhMHJCIqWrpP7OUK3y0uMg9FkiH:KP1Yiwd7OUKC0uMg3kiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924685, "uuid": "2b521fe2-a704-4865-a433-23f6b43fe2d3", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924685, "uuid": "45e3109e-f088-4074-a7b4-836a5a28fed2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a186cf2-3edb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776924752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924752, "uuid": "2bc19c93-8398-4f27-a613-078270a69e4c", "comment": "Malware payload (Mirai)", "value": "a47a864bd1f74efb28e59485a45703b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924752, "uuid": "8a17d8e4-3112-496a-bb2a-52f067703015", "comment": "Malware payload (Mirai)", "value": "51c4b2de237c98a933216675a5910af35d887002f8053f3e73b2770736ec3618", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924752, "uuid": "5614120d-f287-4fe7-a1fd-21bce1924bf9", "value": "T1E1B2E16C40940E05D85B40FF9ABE05E6E66184830AFFC7D99F270CC3E2B74A2791D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924752, "uuid": "b2374300-6963-4445-b4cf-5f66653c21d2", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNrVeCVg:xiBiv2PSbePxNNw8dtlJwEIGT0P1Pbhf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924752, "uuid": "65596bfb-8a75-4c0b-a1e2-834cd5f8673b", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924752, "uuid": "500c45b3-13ab-41ff-8a66-60ae5290ff37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c7909a4-3edb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776924756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924756, "uuid": "19097639-81c6-4eb5-9048-0643a32698e0", "comment": "Malware payload", "value": "a09dff8459fc5b54eb2c133241b3ce34", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924756, "uuid": "f72bd803-a1c2-47db-8f6e-ca8e6d2614bb", "comment": "Malware payload", "value": "2c52907d72bb8d43674bf36469a28271b1f49631359ae929ae1d36b0e9dccba3", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924756, "uuid": "6dc8b6af-74d9-4ee8-9f93-cd482088cec3", "value": "T14713B419867B126F351BD4E13BE1278331D0212FE789E8187FFCE2544F1ADA9D692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924756, "uuid": "15d2ea32-35ab-47db-859d-99ac37b5fffb", "value": "768:e7ofFlFvFEFEGBEZ8FOYAdbH7d8vb9yzlc:pf3x2K/mMdfdC9mO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776924756, "uuid": "525b5bdf-b38e-42bf-8c3b-97e9af51c7c9", "value": 44575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924756, "uuid": "3ea4f62a-b323-480d-9ebd-dd093baa1fdf", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397b76c2-3edc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776925100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925100, "uuid": "f169dfaa-e5fc-40d8-8bc8-a17539c7063a", "comment": "Malware payload (Mirai)", "value": "e1842ba3b09950e4a2a931ce4e4ad636", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925100, "uuid": "ee080c8b-9a55-4db2-8c04-c5f4babf7ff4", "comment": "Malware payload (Mirai)", "value": "b8639d9c6b1c903cc3daee2be163c1c925db0a9bee46158e9730f4627b2e6ed1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925100, "uuid": "5ef9e30d-73af-4eda-ba35-9c58c1c78f4c", "value": "T104A2D01572632D56E3ED2C3DC9AA8317FD661BFC80F6327669415620C94D24A3E38A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925100, "uuid": "5e245047-a7fe-42f1-a67a-740894aa7336", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj/8JwhymdGUop5hm:TvQn4j+ZO5fKAlxjGws3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776925100, "uuid": "e69e02db-e561-4448-b11d-aa7d491b265b", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925100, "uuid": "506f2246-a1e6-459a-8a6d-b501cefc8c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eda840de-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776927120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927120, "uuid": "2b76b31f-a222-4a61-a364-68e2f277b9d6", "comment": "Malware payload (Mirai)", "value": "26cce6755c692ea424f5f6a59ae800f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927120, "uuid": "154624ff-cd78-48cf-83c9-70b5adaacbfb", "comment": "Malware payload (Mirai)", "value": "ae010c2695c0628c7110054be30d17aa26ef24a82f58aa26e900ed5f87dbd968", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927120, "uuid": "c85ac8ca-e55f-4d6c-ac41-8180fe4e074b", "value": "T1F682DF3061AB34E5DBF10431EAAECEC697560BBCD0FC36A31759AF78894250611F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927120, "uuid": "8c6f584f-03cc-491f-ac45-34f02ff24424", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMawhymdGUop5h5l9:2dV0P6+kom0tVAoNvm+to1ws3Uoznl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776927120, "uuid": "55ca85a4-07bc-456d-8986-c2336bef49bf", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927120, "uuid": "2320418d-f4c7-4d39-8311-f3f071b1da51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b59fe28-3ee4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776928593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928593, "uuid": "9ffe3cd4-bd22-4221-a124-b629e26fef81", "comment": "Malware payload (Phorpiex)", "value": "b9027ebe45812816c0f0f8348d215125", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928593, "uuid": "713fcc6b-6be8-4be0-9e56-4088f42cafc6", "comment": "Malware payload (Phorpiex)", "value": "7db487099c98bf397a86cc8fa6b48e20167cedaaf78a72e1ca5ada914bc1d7e6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928593, "uuid": "b1dfdc16-e2b3-4cb9-b34f-0ca5361dec98", "value": "T12F823A0FB8424226E1E110B09672967BD9BD9C7A738424EBF7D44ADA1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928593, "uuid": "a4efaf7d-fcf2-4e11-a2e5-66b49028b920", "value": "ca5592c42b764400102051895df05794", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928593, "uuid": "df7a599c-a94a-4226-a820-c63df3cd3614", "value": "384:AjPtbmV2uL1EaWw5G0yu9NHuage/zav8U9c:EsVPM0P9Nza0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776928593, "uuid": "fd6c4ea4-0e72-4298-b9a7-f9da6967b327", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928593, "uuid": "4c07c5da-7b5b-43de-a342-ab04b8703b5d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776931401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931401, "uuid": "8a838722-d3ad-4f01-b879-f2fc1c5871bb", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931401, "uuid": "e438e8bc-a54f-4d56-92f8-97210947c85e", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931401, "uuid": "4c0141cf-b1ce-42c8-a629-b03a47a43299", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931401, "uuid": "6fd47efb-7980-412d-ad79-37f05909439d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776931401, "uuid": "020f5040-a78a-44c1-8b11-648dc66d107f", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52491c56-f7c1-11eb-b0d3-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1776931799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931799, "uuid": "1c1fae2e-bc1e-4f04-a592-da2d8fd5a080", "comment": "Malware payload", "value": "8a602a42b2bae948865f17bfdccb35b3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931799, "uuid": "ed80cb77-4dd3-4c66-8df0-a7cf67e14556", "comment": "Malware payload", "value": "ce7cbeb1d8ed56317f38f126cd98fa6e44e3cc8bc76956f0fd0ecfbd2d812f12", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931799, "uuid": "214568ee-1907-45fb-a114-5d81378d8c1f", "value": "7532BF8DBA16E6E5F6146CF33C2C45AC89ABF26F0867307048E5B95CC6464AB0E0F7C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931799, "uuid": "3a4d15f3-03f8-41f4-a02c-7645891173e8", "value": "192:fTu2PzRurki7SLDLVpVovt9SbVySN6TQ3JuGpymy/qD1zIWRzYFbYWvR:flzEBkDOvTCZuQEkymy/Gf+3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776931799, "uuid": "ef390f8b-56aa-4640-bdf2-1b641c3a4eab", "value": 11264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931799, "uuid": "11053dbc-3d7d-4017-aaa3-5fa95020b282", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0741fc-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1776937507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937507, "uuid": "710b445f-9131-497a-b78e-fda5e36bad79", "comment": "Malware payload (XWorm)", "value": "56e0fc256889d11f64bd1dde0a690c66", "object_relation": "md5", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937507, "uuid": "18f6f84d-f351-4379-8803-fef069fc9a4d", "comment": "Malware payload (XWorm)", "value": "1aefae3768c71d0c1b78d5f6a27e2124b34f07bb09d202950657557040a2ef97", "object_relation": "sha256", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937507, "uuid": "5c53b35a-e10a-4ab5-96a6-646079b4b40e", "value": "T14641024612602027DBF0D64A436D2B006A0A559334055AAF326D53FB5D9C8F7CAEE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937507, "uuid": "65a30594-cdfc-4f59-9559-e449c4b59735", "value": "24:L3LD4eA5WT53ibnv14Yw5wY8Ysiiw57YDYsO+scRgP7/uVMWuVMSDXruVMiuVMUc:/D4IEujGeu1RmuruvDXru1unuJju/+Rv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776937507, "uuid": "5e97b24d-33b7-4520-81d1-5f7b32e6335c", "value": 2004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937507, "uuid": "dcd13702-a5be-48b5-aeb7-aca989bd5f0c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d14e208-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776937508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937508, "uuid": "4cdb8fa1-5ed0-4a46-8420-7809968e8e18", "comment": "Malware payload", "value": "23b747ff9f297bf25d37ae5c92df2b30", "object_relation": "md5", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937508, "uuid": "5086447e-1906-46cc-ab8c-83fb496c8358", "comment": "Malware payload", "value": "c957c840bae1205c56c40f05342cb8da124ee7d324e800fd26f9b0dbbfd2c5d1", "object_relation": "sha256", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937508, "uuid": "7db77161-fa21-469b-b094-a35061b3f204", "value": "T13CD433607C4F0C45FDCB501BAEB56138A081BE827D3EA591E9CA21CDCE475EBD09B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937508, "uuid": "46a6e087-19a8-4784-9d97-298f5b13041a", "value": "12288:/r4crnqLcPQ6LImqtuVfnui31+Xr30fSkkPEhYv7pqo0:iLcPQJLuVt3Y30forjpqo0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776937508, "uuid": "7674fbf7-2b6d-4534-8522-80378c0ab2af", "value": 635786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937508, "uuid": "c5594b1a-e27d-471a-b322-d56a7958821b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "204d22e0-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776937513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937513, "uuid": "5485dbd1-7935-481b-895c-11b9c95fabbc", "comment": "Malware payload", "value": "bffa181387210364e1d576433306794c", "object_relation": "md5", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937513, "uuid": "425ff847-02e4-4d92-8bca-6b01d0cdd4b7", "comment": "Malware payload", "value": "178d2f43a6d0b7a4f744eff9a5350a0abf6c085e2b1903ab56deb5494b9cf04e", "object_relation": "sha256", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937513, "uuid": "fa2ce82c-0fb8-4ba1-8292-c3e88207dfb8", "value": "T14911DC0A6F99CBB1493248EC075DEA0EF330D1232434AC42F9C8871B2F357A529902", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937513, "uuid": "fa8d5d47-f492-47d6-bc71-9e32fe51946e", "value": "24:3cOoIP9zfz19WK95FiRWY9OgVzQ5jMn/wdMp:JL9zL1f7sR9xzQo/wWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776937513, "uuid": "9ca2c0b9-08ea-49c4-8cb2-8df1c085a2bf", "value": 980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937513, "uuid": "c89f9bcc-ef41-47fd-9ca3-cfb1475b218b", "value": "text/xml", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a79418-3f01-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776941226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941226, "uuid": "96247553-b64c-47ba-9232-c27259b0f7be", "comment": "Malware payload (Gafgyt)", "value": "479feb8fba4aa6a2c999a767b6c31451", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941226, "uuid": "1eaf5634-5d97-4caa-97b6-a929570b62cf", "comment": "Malware payload (Gafgyt)", "value": "81da269aff4745ba4e326dd488e4dc4b1031a47cc12c5af3bf2e6164489480ee", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941226, "uuid": "43c4bbfd-1c30-47d4-90e8-6c498291b483", "value": "T1183150C621E198757DF5F52732A88510B8C5A1C752CFAF49AEEC38D484CDD08B415B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941226, "uuid": "6089e868-524a-4790-8877-ad99edfb57fc", "value": "48:YpgpGhpgpIpbspM53pG/kypMpC3pspShpQ3pj:YKshCC9sC0fWCWCu3J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776941226, "uuid": "550cd496-9b9a-42a1-a64e-fd88052ce612", "value": 1727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941226, "uuid": "dddc8adf-591a-470c-a129-a8788a6647b8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfa99157-3f01-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776941243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941243, "uuid": "39c78fff-bcca-4c3d-a9d0-344ccfe38181", "comment": "Malware payload", "value": "599e622043807c99b8b228187b1f8395", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941243, "uuid": "5569988e-ff8c-4de1-856f-57c728922082", "comment": "Malware payload", "value": "f85e33640eb853760e7fbfe589c9b57e2866d886438916c20ab06a2a601358c2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941243, "uuid": "be47aaa9-4de3-40be-a404-d6ce2c071d8a", "value": "T15054EF620489AD26237690F04F713798ED4BE4ABD0A0C58875BE174ABF77AD63043F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941243, "uuid": "dbfa607c-740d-4279-b4dc-00231a580db9", "value": "768:pQwvOL94dn+rIAcZyj1hMDG4lKaBe3JNHA3h3y31GG4Av8/O9M7+jUjB+UP9K3NI:nvOL94ujrNUjB+UP9KgD/Rnv/N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776941243, "uuid": "b2ed8438-8b1b-4e75-8d76-9e19ab1b8965", "value": 305921, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941243, "uuid": "cae6d2f7-2f85-4f48-b78f-d421278f5fbf", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ff28a63-3f02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776941566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941566, "uuid": "90e7154f-a34e-46f3-aa87-d7c86a328075", "comment": "Malware payload (Phorpiex)", "value": "271149e7b06475232f43b8595ef6515a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941566, "uuid": "e87719bc-066a-444b-92fc-3a9216544543", "comment": "Malware payload (Phorpiex)", "value": "a20ac10f807be5f93843283a92d8792310b2fddbad783cd305c130fb7835ef0c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941566, "uuid": "846a555a-1c91-450f-901b-a51484d581a0", "value": "T1CD825B0FB942421AD0D100749636867BDAB998B637D814EBFBD08AED1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941566, "uuid": "41eb5614-7d41-499d-95f7-7d80dc0f4eaf", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941566, "uuid": "67937a11-bdb3-4afe-8171-a025e3183251", "value": "384:eI7MVGASM1KwngSZb7u9NHuagRhav8U9ce:TQ8Ub69+ha0UN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776941566, "uuid": "f576fc13-3069-487e-82a1-db4f3502e5d2", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941566, "uuid": "ed30623d-34c6-43fd-81e7-427b9eb1774d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3c54995-3f02-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776941706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941706, "uuid": "2eba8498-9d78-4366-a7ed-d779f2eb7e04", "comment": "Malware payload", "value": "c19bdf8dc788d433bdccc3f38a522643", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941706, "uuid": "f5b32998-db71-4aff-84f7-fa7d5130a20d", "comment": "Malware payload", "value": "970eec6f85e4e4c52589fb352e44726e4c9fcaa8faf8a9991579130a42cb00e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941706, "uuid": "ced681dc-6850-4cd2-8ce8-e65114cb55aa", "value": "T15F34BCB4FA074B644A73D9E9E1983CB8D6F7FB9CA8AA4DC441784F0E36207205E9D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941706, "uuid": "3998675c-e76f-40f8-9457-c48a58ca1f97", "value": "6144:QCZRDyDb5XGBONT06yTmwHlNtgzTwQKWIj+OC6:pLDyDN06yTmalNyKbj+/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776941706, "uuid": "f4e239f9-d137-4b01-8bbc-d6fac2c5e0a9", "value": 239710, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941706, "uuid": "d135f67b-6869-4fb3-9d56-16af2f52b0fd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1e9569b-3f02-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776941730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941730, "uuid": "13c4d3de-dc84-4579-aca7-a0e69250568b", "comment": "Malware payload (Phorpiex)", "value": "a61e39f8eae5b814bdb310851439db19", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941730, "uuid": "df765e45-0877-46b1-8441-5881db816317", "comment": "Malware payload (Phorpiex)", "value": "5fb0a8edd0ece76b52b8bb32dd9777255585237c511a54d2bc3875796db5c361", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941730, "uuid": "57f98973-d181-4fe2-8fa3-5103b650f2c3", "value": "T19B823B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941730, "uuid": "2fdef544-8870-43c7-a6ba-9007bd2aae1f", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941730, "uuid": "bc7f54d7-87d5-4396-83cd-e7ccd0423062", "value": "384:gI78VGQic1Kwzw077u9NHu/gBhav8U9cL:xAo0769Zha0Uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776941730, "uuid": "6d8ac76a-492f-4f47-9c35-8334a415f246", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941730, "uuid": "f7d77109-13e0-4ace-9b01-af7af2e5f7de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd3aa67f-3f03-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776942125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942125, "uuid": "e96499f7-b5d1-4359-988a-aa703073ef3f", "comment": "Malware payload", "value": "1ac4b9a30f67b8bad9e59f1e36eafd1e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942125, "uuid": "4f476c4a-48b4-4504-8bc2-a295930ae852", "comment": "Malware payload", "value": "3eab1c9044fafe12207ae3e92aba8cdb2cfad91e470711b0c6571455bdd07879", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942125, "uuid": "290a9550-3bcc-4701-afa9-91a8e9ef687d", "value": "T1B67394B13D8B2C2A210F029FA057321CA4D6CEE0E513A5E8F1FF912867F5DD176976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942125, "uuid": "02845ade-079d-4d11-a950-ee3e1dd45e45", "value": "1536:DdNKuu59f5spVEc9lGzvEQYM1tAZa/dP+3mT6j:/09f5sptkzvEQYM1tAZa/dPCU6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776942125, "uuid": "2ae04db1-baf2-4beb-85fe-c8bc24d6126d", "value": 77345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942125, "uuid": "792e364d-beda-4f09-b1b7-47cb63c7c4db", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee93c275-3f03-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776942154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942154, "uuid": "a0025d4d-cd0d-48a1-be6d-140b3c48eb9f", "comment": "Malware payload", "value": "85282b7c0a79430cbbf59dda8c230c10", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942154, "uuid": "58c23668-9f90-4b5f-90e0-26851ba2fe90", "comment": "Malware payload", "value": "3537c61c604f36a9bc77e06d0edfc0c801b0c3b93d5f7cc57bcb0f38a9e748df", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942154, "uuid": "1bf3c7b3-f94a-4d9c-8650-134f7d8419b4", "value": "T18104E1A333014AF76DB7899FBB3948E9407EBF0003E160E2DA6B6C94D6A4757C0B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942154, "uuid": "71314ab9-b7bd-4e87-b72f-aa7db0fe197f", "value": "3072:IiJ+yDzDUrdeVsdQPt6+LJU/ZlPNk9b7UOoX0tJYcbqRX0IGFeDFf:yjOrZa1d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776942154, "uuid": "b73dda84-518b-497f-8712-d3b4288caa59", "value": 174235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942154, "uuid": "e9a820af-24b2-4cdf-988d-95a918cfffe9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a42b451-3f04-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776942415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942415, "uuid": "9bdc96f2-a81c-46d5-a155-969346e3e61d", "comment": "Malware payload (Phorpiex)", "value": "46c1a9d077fd8fc1584052a95b02afb3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942415, "uuid": "40961373-86d0-4a58-ba44-aa9a57713a66", "comment": "Malware payload (Phorpiex)", "value": "501b05b797f03678aae8b3e3598115e9e2aafc6c6198a548d8a447fcd82137b5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942415, "uuid": "2aed0a75-fd0e-4c98-a47d-5a775e2fa581", "value": "T147824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942415, "uuid": "9a97bc4a-99f9-436e-80c5-c4b0c1dffdf2", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942415, "uuid": "8a38b60d-7673-4778-84bf-3d34dad8633f", "value": "384:YI78VGQic1Kwrw077u9NHuagBhav8U9cf:JAw0769uha0U0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776942415, "uuid": "0d91a412-c738-4674-b9aa-696a7018be4b", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942415, "uuid": "50c4f7ad-3562-4b09-b8a6-22c37f78ca3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7bc0d86-3f05-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776942975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942975, "uuid": "f60abe98-3a54-4c2f-9edf-6f9732ef2040", "comment": "Malware payload (Phorpiex)", "value": "d0966754e1216336b37c5785625e40ef", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942975, "uuid": "2d755ada-a57c-4290-bac4-29cc19b5dea3", "comment": "Malware payload (Phorpiex)", "value": "d6930965b838344ccb783fa697f76f1ffdb42939e4b084f169503d8540144cb4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942975, "uuid": "6c48d787-e631-42ab-af86-d79bd1fae2bc", "value": "T1A3824B0FB9424216E0D200B49672867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942975, "uuid": "2a22a234-2ef6-44b7-91be-313d4fb70135", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942975, "uuid": "0cf281e1-496a-43b6-b637-f0284dade67c", "value": "384:6I78VGQic1Kwzw077u9NHuagBhav8U9cu:fAo0769uha0U5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776942975, "uuid": "62630147-ac22-46a3-a133-cabf4bad451d", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942975, "uuid": "a975c707-d4bf-407b-86b7-b2d7a73cdc4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34b55ec7-3f07-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776943560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943560, "uuid": "524166e8-a024-47b0-bd4d-26af53c0381f", "comment": "Malware payload (Phorpiex)", "value": "66656bc4b3115486bcd4979dced90e45", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943560, "uuid": "22e400e2-f2ca-4866-8d0d-3c931cddda8a", "comment": "Malware payload (Phorpiex)", "value": "4910c586d5405fe9ca9c339ac2e3904f6eff8b8913605606fcc54f14810a29d4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943560, "uuid": "8acf8500-2a06-42b7-be85-af90031f9243", "value": "T18C824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943560, "uuid": "30268ae4-25ac-49ba-8a9b-6547f38d069f", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943560, "uuid": "8fcc9c81-98db-4284-971c-0089740dd1ad", "value": "384:iI78VGQic1Kwvw077u9NHu/gBhav8U9cd:HAE0769Zha0Um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776943560, "uuid": "d091834e-b277-439c-87e7-2380efbe6d90", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943560, "uuid": "08948c0a-3b66-4ccd-9a9a-bc780074c8f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1d0cdc-3f0d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776946207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946207, "uuid": "1d971f89-bd58-4540-b853-d416f045fce3", "comment": "Malware payload (Phorpiex)", "value": "57d6c30d3024bdcbaaa7d4bd8a294f42", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946207, "uuid": "7541933b-515f-4eb6-8e00-60639d285f8d", "comment": "Malware payload (Phorpiex)", "value": "4fe8620b653acea285b9dd46840140605054804eaa56941c5ef8a3c3bb37df1e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946207, "uuid": "883c20f6-510b-4376-9597-0bc4533ab5d2", "value": "T12E824B0FB9424216D0D100749676867BD979A8B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946207, "uuid": "8dfe8472-588a-4633-80fc-08cca6300ca2", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946207, "uuid": "47b355cd-a38e-4997-97e9-086d5818297f", "value": "384:jI78VGQic1Kwzw077u9NHu/gBhav8U9ca:wAo0769Zha0U5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776946207, "uuid": "fe09706c-f501-4c27-b646-29ef7655f194", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946207, "uuid": "e9732098-8d59-4671-b883-73201fc198e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c4ab89b-3f0e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776946526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946526, "uuid": "d2946dee-1f21-4940-84f0-eddca9145089", "comment": "Malware payload", "value": "6216fc987381a5ac097b00d96f81bbd7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946526, "uuid": "b86ae04b-6bc2-41e1-8e89-f3a97494661a", "comment": "Malware payload", "value": "31161c9d0d0e42a3dc4b7afbd10ff0a4412b2a8bc474e3a6e5e16ed5f3f56db3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946526, "uuid": "9ff4a0bf-8360-471d-a9ef-6fbe5d385a47", "value": "T19293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946526, "uuid": "7bdbdbce-710a-40a9-be3e-7bc825330166", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXvIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776946526, "uuid": "70f5f79c-a6d1-4bad-b6fe-21b52849a1ff", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946526, "uuid": "00ab918c-11a5-4463-bfd8-e8ff86d63b8a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2122d3a0-3f0e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776946534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946534, "uuid": "9142e13a-8ce0-4801-87f7-9cee3dbbadd7", "comment": "Malware payload", "value": "05a44ba904e39499eedde0ba735861ba", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946534, "uuid": "8cd6be97-a2c5-4fa7-b949-25d8b71385f0", "comment": "Malware payload", "value": "0bb780b5ae0cf0f31fb39d94834ef8797c3cb9c594a452f7c04d17d45f3658ac", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946534, "uuid": "de36a996-ce32-4954-9c33-209c2fc30c3e", "value": "T14432BFB7CEF75D741061982C32B30AB8AC97A1448FB6F2CE5EAD39B24385691EC040", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946534, "uuid": "e4c01482-d994-4640-839a-50a1c8e5eb3a", "value": "192:5uEP8Qdu9sbsB6BDP1D7NY2nIlflEFvvQ/gX3Y4A:78QssoB6B7hpJnUluvvroX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776946534, "uuid": "9e10a8f0-4afe-4bfb-b423-9baa4ccc1023", "value": 11008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946534, "uuid": "8a4bc42e-0d04-4900-801b-ba989c3a6a50", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0170cf18-3f0f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776946910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946910, "uuid": "58ced164-f664-4a7a-8a1f-3d1e2405fc53", "comment": "Malware payload (Phorpiex)", "value": "5a79699bb5c1d9816cc7297744fdfa28", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946910, "uuid": "7d129796-7820-4d09-aad9-30c447a71a36", "comment": "Malware payload (Phorpiex)", "value": "2e5438fd421162abf69c23c9c8aa01426d2f27b2516564bc9f8e7d56c64bac24", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946910, "uuid": "cca12e30-ea01-4a1a-8267-5c0bb6be7042", "value": "T160824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946910, "uuid": "0cbbf53b-bfb8-4466-bfd6-c5023c64aab8", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946910, "uuid": "4c870811-4e79-4c64-ba87-ff33ecf6933a", "value": "384:gI78VGQic1Kwzw077u9NHu/gBhav8U9cV:xAo0769Zha0UK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776946910, "uuid": "5ab411bf-1506-4f26-83a0-ebab5575e868", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946910, "uuid": "17edaccc-9a6f-4e01-9b2f-d4d3c79a47cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cccda574-3f21-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776954982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954982, "uuid": "c2300569-5fc1-447e-b8db-0c97f526b02d", "comment": "Malware payload (Mirai)", "value": "d8ed2fcf49be06fcf07bc0e513d58b31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954982, "uuid": "a0e37376-9e6a-40d3-ba62-7e8b13af40d0", "comment": "Malware payload (Mirai)", "value": "864651854059e59ef415c418eb11440b4ae579ba6f6259afa0a13305c5bcced2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954982, "uuid": "dbffb7c2-ee39-46bc-9ec5-7971e2103fbe", "value": "T12CF3FB71984CE6C7C53321BCA0ED9FBA8E7E72DA2749CD027DD161319AC5EAB3906C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954982, "uuid": "4b036810-0c32-4953-a469-e91b58d43ecb", "value": "1536:b64M4J74RUOPMKjaTnQaK+pK7DKrtwp+Vp+wEi4S1:b6WOP3uTnQK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776954982, "uuid": "1d0b1f12-9f79-4fc5-a184-ebbe33b54dab", "value": 166064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954982, "uuid": "1f30a5b9-a312-4fcd-9d17-e176a7b80c0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ded9fce-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961158, "uuid": "c2232845-c4d9-42fc-b230-697b4b59ed99", "comment": "Malware payload (Mirai)", "value": "7220f3b8f2bd81b8ce6d011b0243c00e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961158, "uuid": "a18a11ae-f798-4a60-a500-7ce5edd5a453", "comment": "Malware payload (Mirai)", "value": "a0c7f4d61271ba17052c25df0c6b0d275a22455b3f94cde063d456dc07c69957", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961158, "uuid": "a96f19dd-213e-41f8-a23d-1cd23bc63675", "value": "T12E83F719BB914FB7EC6FCD370AA9170134CC591B22A97B3A7934C918F60F64B06E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961158, "uuid": "891ffd2c-4df0-4d15-9055-c7fd326ac646", "value": "1536:p7UMCN+nMZHavzjkIPLMb3dJLEbqP8AvJW5coYZl2s0CVEJNl:p7dCN+nOavz/U3dm5coYNVANl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961158, "uuid": "8bccf7fb-36dd-4157-9d44-65626359a27e", "value": 81928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961158, "uuid": "c29ad8a1-4fd8-43fb-a556-9d2416335212", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3ce4a9-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "6fe6544f-3101-447a-b91f-32f690d636d2", "comment": "Malware payload (Mirai)", "value": "5a4f49fec7c52719369c9465f61340ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "399fd4e2-300e-4d0e-b69b-b3b062896122", "comment": "Malware payload (Mirai)", "value": "6f2720000cc39c766bbe14b34221a38f9b3b143bd1252884059f781eaf1d6965", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "42dfe8a4-0f3a-4022-b648-c766102c4bba", "value": "T10EE32B46EA808B13C4D6177ABADF424633239B5493EB730699287FF43F8679E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "798209fc-fbb9-45d3-83df-0e24f746b633", "value": "3072:LfIWnM9uTk1zXxqaNbIkz/rnN/9Yx5TQBuPPDM/9+10g38VnE:LgWnM9uizAaNbIkz/5/w0BuPLM/9+10i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961214, "uuid": "76129f3f-8c8b-4ae7-91ea-23259bad3e76", "value": 145461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "62653500-7bed-44ed-8934-d89a11130cde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3e4a77-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "76714bfc-5291-47e5-a6f5-a6c883fb0797", "comment": "Malware payload (Mirai)", "value": "25d0591605242c27f2d737ab3c8e261a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "aedd788e-e24a-4aab-ac8c-13ba29827553", "comment": "Malware payload (Mirai)", "value": "666d8973a9eb59ce672cfd7727371548425da4bd38002c06930f8d867938b13e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "7ca5f051-0034-49cc-a1d1-6b9f9cf56be2", "value": "T15373B81D2E628FADF7A9823447B78F21939C378627E1D685E25CD6001F6034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "8b799ded-1fd6-440c-9cef-d0785bea575c", "value": "1536:uuT16ORJA194fspAuAWbQ9wXMdUBvcXeZg/Z:uuTYO019NjXMdUBvc9/Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961214, "uuid": "499b0d28-a2ee-4410-83c1-79f4b0eb1595", "value": 80712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961214, "uuid": "736bc0af-c464-4978-9ab2-1a044565c490", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffef862-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "f2799a28-fbf6-4bb5-b245-c38c5a58be9f", "comment": "Malware payload (Mirai)", "value": "50140411956f16524b91c9ec39d3e470", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "3767c1d0-608d-4c0a-9a24-101a840bfcad", "comment": "Malware payload (Mirai)", "value": "9c59f0253c0a4da4c2225b49432fa395b3738389901c402f6316f8b5db862bc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "4c9bf61e-224d-4972-99db-914dbc185a4b", "value": "T12C530891BCC19A13C6D01276FB5E428D332667ACD2EE7317AD162F11778B82F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "82b66844-1614-4406-974c-2da47fe1f1cd", "value": "768:Z5MK4WsXHawudLng7lBbTcewdqVF5WUJ0hVCqYHr/NRFocFAUdJ7MUvg7r0+ifmJ:jD4VZML48ewdMXNJuUAUm5iuKfd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961269, "uuid": "b4a36b96-391d-4eb4-8a00-44c59fa1c20c", "value": 60844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "fa978499-524e-4d7e-bcdf-8fca144ef20b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70015093-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "4f6d0d0d-3958-4c5d-9097-b5fd2b1ddc69", "comment": "Malware payload (Mirai)", "value": "71be3fc27c33dc9d945ced275ea715e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "263b9b4a-50ec-4175-a9e8-81be7c29535b", "comment": "Malware payload (Mirai)", "value": "61fd3ee11537b9e82d2c8e35593b6f4cd66707775f481cc4c23d8dc9e0b6ebc8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "9b45bfae-07bf-4aeb-afe1-f8677e805c09", "value": "T1AE3338C0E64BE8F5FC5646742077E7329B73F93A0029DAC6D368A533A992605E6473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "dcea35b2-edf4-4768-ba71-cdc1cdcb62d8", "value": "1536:K9pCH13EPvQ7PKVjC6ymlkNspmXmZGb+RjwLS3:rH10PvQ7EjymlE4pZGylwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961269, "uuid": "440ed393-3e06-4d7d-8de1-56b912ff4309", "value": 54352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "fc6909d8-fbdd-4c9d-b593-ff2f25c59475", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70040b83-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "2430ba00-940b-4bf1-8f15-ecf7dbc08693", "comment": "Malware payload (Mirai)", "value": "5012a5252a69cd0c6235284285cc4d4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "d275762c-164e-494b-a5da-120253d51c66", "comment": "Malware payload (Mirai)", "value": "8bbf7f1415d21d66d15700adfbd66a4bde7032c916b5a2bce2c497d8f04d2df0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "c4790a3e-b0dc-4143-9adf-5660a5aefec9", "value": "T1C0532890BC819A13C6D012B7FB5E428D332767A8D2DE7313AD266F11778B91F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "4a883d51-3ac9-45a0-a384-896611f13bda", "value": "768:izv8bekhpK7h23tbClhceioot90OmKOVCoS/NRjrrb1qHMkAgr6OuNXn8V3OEv9c:081hpK927eitv7XD7kl6VX8tOEv9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961269, "uuid": "452e316d-efc5-450c-bc4d-3737043e3931", "value": 63924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "d767fe02-dd1f-4513-b775-ec5482af492a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7004a733-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "37d07984-f5dd-4010-9af6-eae01b575444", "comment": "Malware payload (Mirai)", "value": "134291d2fba5958b7c8c4f8fbb08a708", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "841d5b81-9201-4cc8-9ca3-eaec20b64947", "comment": "Malware payload (Mirai)", "value": "a6626bb435e68780973dd4a50adeef84af904a96be2b3e423c3b75c15821b499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "0fb9116b-149e-43c0-ab29-8490d64f7e1a", "value": "T12B731956B8818A12D5D502BAFE1E118E33131B7CE3DEB3129D206F24778B96F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "279c6723-d81d-469c-894a-d045d0b900eb", "value": "1536:RNnxyKCJqGVmGsVFyEbZAfiQaaTtc8mIYiXNxNoqC7fw3W5/Y0:9qoGgGsyEbZA6QaWvNXoqC7fwG9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961269, "uuid": "88737713-da98-40be-8084-eb82a8157b92", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "cf821f74-29d3-4467-b569-c4fd08d25f47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "700d7ff7-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776961269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "0cc6cddb-a6d6-413a-bf18-4644cd543a08", "comment": "Malware payload (Mirai)", "value": "d31c3bb7ee0f0a7798da47bde1b6e555", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "12aa8cbc-50df-4d84-bbbe-ca2b6e1c766a", "comment": "Malware payload (Mirai)", "value": "10c177d688ed4dc7492308f80e632be1de4a723b2352864c178c36320f4d6630", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "d552009a-6a7d-4351-aa4c-dc0ea5e2b695", "value": "T104532913B94180FDC59EC174172AA63BF673797D0235B3AE3798FB126D49E214E2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "24841f1e-c7f9-440c-a79d-d4ea5ba172a9", "value": "1536:CdRZSjx8V2X3+zJ1dBbL/6m2yMiQlSZstb+NBJspqlBzo:yRZS98VcuzJ1nbkyMiBqb+NdlBzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776961269, "uuid": "f004db1a-2b8d-44dc-a03d-6559fdc05ad1", "value": 63264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961269, "uuid": "74e2682d-c4f3-46fa-a8d4-676bcf7559d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62b861e5-3f34-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776962965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962965, "uuid": "06476f8a-0933-405d-bdf5-4d2a71af4f82", "comment": "Malware payload (Mirai)", "value": "cc62ed9278d4f8296371cf21c8dcc01d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962965, "uuid": "ffa3f050-59e7-46cb-aea4-56194286e0e9", "comment": "Malware payload (Mirai)", "value": "db59e598d82175a140b9e86f9b2e53f05d348d0494d0690abbc44052c2403b2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962965, "uuid": "841bca75-9580-4f80-a46a-e84244293047", "value": "T19D2471B1E94CCAC7D026727D91AA8F3B8D3E73DB2645CD017DD160368AE5BDB2906C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962965, "uuid": "c44e3268-09b5-4ad6-9e3e-3106a46a4a6b", "value": "3072:aEkrarsu0OeMyH4rDIY542JxDnTmIx7DzdkdSdVdX/OWWQ:zv0CyHuDIY546TmIdDzG8fVO8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776962965, "uuid": "bbc52f6b-1bc1-4456-91af-7031b2e99be9", "value": 215616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962965, "uuid": "1e75937c-bdd0-4ab5-919f-51a50caca0ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d610043-3f34-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776962983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962983, "uuid": "e27670ab-4750-4cd4-acf7-fed48e7ee5b5", "comment": "Malware payload", "value": "94e0a1a26906637746059243095e13d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962983, "uuid": "45c831e6-ccc1-4a18-b880-e13aa649fdc6", "comment": "Malware payload", "value": "1f2775f955c1b1cd0c594b31d602600d1f1c8f0008496ec526d3d19c6e41ec7e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962983, "uuid": "0161ae15-77c6-4862-99d3-9947c0baa453", "value": "T126630262D416FE65E9649831FC3D81622390E21D49833F116B83B5ADBDAAB0D677CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962983, "uuid": "985399b6-6df8-4812-811a-5030f3d3ed3a", "value": "1536:jckXnaNimS2VecLZHPoUvw9cpwrgWQasp1Nx0gL9asZ:TaNimS2VecLRPEGwratp/Cy9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776962983, "uuid": "18b1fbaa-0fdf-44c7-ad80-cb78ed104622", "value": 66836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962983, "uuid": "c40ccdcd-4770-488c-b51a-95868ad6c189", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e789ed16-3f34-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776963188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963188, "uuid": "be0bc735-36fd-4caa-88ba-328dd613ff69", "comment": "Malware payload", "value": "594b771882f526b19ba820f821c277cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963188, "uuid": "7860f5b6-d2f5-48f2-ae77-97a03778a54d", "comment": "Malware payload", "value": "e340cf3faaeb5eb7302108ff8344efe3b7341727586b073d842bfff7eeed01f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963188, "uuid": "f927d1f4-9635-4b9c-b9b8-d414a25d4e8f", "value": "T1BD430131D3E5EB69FAB649DECD900B887BDE4A9A7BD1F1F36E114615B0D01523128C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963188, "uuid": "a5b105b6-8ed9-4464-94a0-0646cfdf9634", "value": "1536:GCdZKkukrhl8cY69aUdCGu4I/37me2g4q/54u+qgw06WX8:ndZKkukanFjL2gP4u+qgwXWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776963188, "uuid": "df74a1c3-8233-4fa4-a85a-c27f25ec10bb", "value": 58972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963188, "uuid": "89470299-7a73-4db9-9f43-bb30be92eb04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4ed3985-3f34-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776963210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963210, "uuid": "a67f5979-c304-4c8b-bb24-59d55e401cdf", "comment": "Malware payload", "value": "e0f28eb254b16053eee1faa8e2d71d43", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963210, "uuid": "4b0700d4-e51d-4748-ac58-1c3fdeb6f150", "comment": "Malware payload", "value": "9823505882bf8f5b7c4fde5747bdc3e46651451da379f8091ec12e9ce22fa79d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963210, "uuid": "e93e49a8-b5ba-4356-b6b0-5880ba5150f3", "value": "T14734DFF29472D23501A90D9772B4C8FE79211B82EFCA6861C50D64E0FDDE62D6F99C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963210, "uuid": "d81293c4-4725-4dfa-86d5-437401331c43", "value": "3072:T5cD5pSLzWXFhfIEF/1Xj+GTRBmYsdemZlxJPoMqm0pk/jrwdmpF+4TS5b8UwEYX:o5MuHFNXj+It9yxaIjTp/S5EiOsxyVSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776963210, "uuid": "f2a37e83-8d68-477e-abed-cb5879a65104", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963210, "uuid": "1eb5dfa3-c443-4468-8b94-2754bada8df9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4173607-3f35-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776963531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963531, "uuid": "d342fbdb-5078-4ed4-9bdd-81180d4a2315", "comment": "Malware payload", "value": "719a9a362d132f378a75f6104bbbb0b8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963531, "uuid": "767d3b34-8d6a-4ea0-bfa4-1ea56e20d37c", "comment": "Malware payload", "value": "5aa99ececf66aea32d99848eb85a2c9313aba954b01eaf97f50adc5e2d8040ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963531, "uuid": "c0a98c25-c191-4fc4-8694-80da7a62af18", "value": "T1AB8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963531, "uuid": "9efa5df8-2c3e-497b-83f5-50e830b86b71", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnxWapVN/:XEKltp9txAX/yr2pbxWEVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776963531, "uuid": "f5ca3631-ea59-46c5-b769-60486201cc60", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963531, "uuid": "e991b424-3998-4902-8067-de10edc7457e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd33e0d0-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776964083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964083, "uuid": "cdb82999-7d4e-4e4c-abb4-d2e58acad879", "comment": "Malware payload (Mirai)", "value": "f44a456fd874ac8fa7f0f8c9aafe515e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964083, "uuid": "4d23a991-aef3-4de3-800f-bab0952fb028", "comment": "Malware payload (Mirai)", "value": "c136d407725c8772669dfbd1e5956cf820520be720470703bd4fb641dd77e97a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964083, "uuid": "27f033a1-3a0c-468c-a550-52892f9f7681", "value": "T10B142D72944CCAC7C522167DA0E9DF7A8F3E72DA2746CD217CD051348AC7E9B790AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964083, "uuid": "f25f2975-7c91-44d8-ae03-b3325f35a0eb", "value": "3072:U1KUX402w5MOIHvRwUpkmlfsnHhTyb9i:AK440Y3SnHhT69i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776964083, "uuid": "c8798c35-6d7b-48b4-84f8-dfd7cdfdb41f", "value": 194688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964083, "uuid": "cb34c9b2-4342-421d-8923-83e5ae7f749b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99c926a5-3f37-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776964346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964346, "uuid": "b5ef3b97-50a8-43a0-8d4c-788fe7a48aa2", "comment": "Malware payload", "value": "1b8081c6828698e4b7bc9be802ee4f62", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964346, "uuid": "75d6ddb3-a80b-4089-a15d-00eb5acb9370", "comment": "Malware payload", "value": "73826d52330494615b199749886bc93217607c6dd990cd2cf8bbaa80ae38f7ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964346, "uuid": "af12d7fd-cb4c-450c-bca7-6f460c51546b", "value": "T12C93193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964346, "uuid": "2bd8ff6f-c171-4302-848c-22892b09ccfc", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKO/s1kK8rW:n8JIe0GitkbFv2v05xWjra/s1kvrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776964346, "uuid": "4c90338a-eeea-4d16-bcc8-f37211dd0ab9", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964346, "uuid": "00ede747-e78f-4826-a3fa-22a7e6551ed0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5c6a9c1-3f38-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776964822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964822, "uuid": "ffb125be-2643-40ea-ac77-4c3f45207c39", "comment": "Malware payload", "value": "84b7baaa2e134146258d883388114f18", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964822, "uuid": "7717e06d-c776-4636-8912-67646f875705", "comment": "Malware payload", "value": "3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964822, "uuid": "0453cce7-de92-4f5d-8c35-378b17ee2b2b", "value": "T15DB57B523C9104BDC0A9B73248F27692BA35F8190B3627D32F95AA782F37BD01D763", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964822, "uuid": "d604c4b9-76b0-48ae-99e1-9076dc998763", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964822, "uuid": "e6110a3c-f5f7-422a-9a03-8682ddb54147", "value": "49152:wuGIVgBM64FTkw5Y/XeWbqRRpxqJIW+mpOSOOR2:wpywJITmpBd2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776964822, "uuid": "c4c79ebb-9c44-433b-a363-4fbad1d18f51", "value": 2381000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964822, "uuid": "f60ae1ff-80d2-4fe5-89c1-bd20240cb9de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69077b60-3f39-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776965123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965123, "uuid": "08a10715-4010-4d29-99d6-f1cca1795327", "comment": "Malware payload", "value": "1ba44b3a863a583c9dfb3f7057d23ed2", "object_relation": "md5", "Tag": [ { "name": "DemonBot", "colour": "#c476a9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965123, "uuid": "ee8fc722-baff-4964-ba26-75aa47d9407a", "comment": "Malware payload", "value": "55da84bd24bef465f5db0b81f3d1d1fc202c65de4bae97b207218a992185c88a", "object_relation": "sha256", "Tag": [ { "name": "DemonBot", "colour": "#c476a9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965123, "uuid": "13e05693-f3d0-49cc-b2fa-443b2633d324", "value": "T1FB530252926E5D74D2FC09797CA9008D172E6D37E0D660608FA4C098789FC9E74FEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965123, "uuid": "7d24a6e7-cd9f-45f6-bbc7-881b16604912", "value": "768:kcxmLmcGbtlxJHKNMyWyV7ZPO0knh/QtbntU16BCQ5gbX9aTWFbsdPF5NJOmxL31:kcxw2zx8NMK5ZrkWk4BC5aTWFk3fxY2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776965123, "uuid": "f13a3811-46f0-4422-b76b-02c7e6ab2579", "value": 61420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965123, "uuid": "c1bf8593-4f43-453d-951e-54dd800491df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3392e79-3f39-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776965355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965355, "uuid": "4e13292f-94fc-4724-90ca-73ff9b74b41f", "comment": "Malware payload", "value": "2e917bf72973a78345a7c280ee6e4941", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965355, "uuid": "882aea7c-2603-4a25-8d6f-51a554008af8", "comment": "Malware payload", "value": "82b2b4bc4c84ee240e4a99f7cf16561beeacd0363d9566b1cd985bf365adc306", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965355, "uuid": "209779b4-2d7d-4960-8299-735d839c3f3f", "value": "T1EA53F212571B46F9C57E71F273761A05EF70620671059AAF090C27AFF9E78420E25F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965355, "uuid": "45cf960d-46f7-4d56-8a8c-24ccde01169f", "value": "1536:U72syTYk7bCgiz+00qZ2o1w3DPURnFujR:U723sg8fZxK4FujR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776965355, "uuid": "a20dfc8a-8b4f-41ff-b99f-ab0e523b78b4", "value": 60736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965355, "uuid": "9a943076-6e63-4871-8ae2-207f9d9a6416", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca81f52-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776966364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966364, "uuid": "e6ccf45a-f836-44ab-9b5f-421d0cd4a472", "comment": "Malware payload", "value": "998c7c50b9a61fb36c476e5ec95935b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966364, "uuid": "855ded17-e3ba-4200-b724-305478ebee83", "comment": "Malware payload", "value": "9fbe336a8b60e6000138150bd544689b386bfdc268f6f585bed478d291365f2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966364, "uuid": "6587ddf8-62c0-4aea-a893-c970860f3fc0", "value": "T17E53F1ECB30358E2D21BE6F382A103507E72DBD20215FC477634B565CAC649EB4A66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966364, "uuid": "309ed61f-cab8-4346-bdab-5d56219e7822", "value": "1536:Yijk18NUPIgKVi619u93OC5LQU+A1uDVrY1:FjkX16+r5LQU+KuDVrY1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776966364, "uuid": "808ffb22-8d5e-4270-a4e3-977955fc84fb", "value": 61812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966364, "uuid": "0a6bebb9-3bde-4399-9807-ed244568d7ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dee1987-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776966393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966393, "uuid": "034aaa8a-fc59-41f0-9f64-5d015c930155", "comment": "Malware payload", "value": "212b057e908b05614ecfc44f5aaf54cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966393, "uuid": "364a762a-4b1d-464e-8e53-0aa07921f8fd", "comment": "Malware payload", "value": "a6ab724fa2c18233e56a2ba8d971d811da5a0ce1b621c69ba8ad31b81847f8d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966393, "uuid": "406b69f1-7be2-4209-afa3-cf8b7eb8fc6e", "value": "T16443F24BDAA94750E047087134EE3D2B90B0962B81D992E6BCB57AD78D50F3376ACF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966393, "uuid": "28422852-a99f-412d-af1c-721a5d03d426", "value": "1536:+nK4Tkanr3Fcr5OrHI3wgVPzum3GcMXpJlgnouy8Nqa3:Mxr3Flww0ymcpJCoutga", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776966393, "uuid": "5f581588-ad54-406a-baaf-79f5243d9925", "value": 57472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966393, "uuid": "1694c5c4-0189-4a6c-bf85-a0a90350152d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a07e7521-3f3d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776966934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966934, "uuid": "824e9327-0e38-409e-9e5e-5d12d9d5287d", "comment": "Malware payload (Mirai)", "value": "a768a6a9f31fa8beb77855b596662e8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966934, "uuid": "5a9ac293-d79a-4914-b002-b70d554e1639", "comment": "Malware payload (Mirai)", "value": "a653f33832e666b23837da088964d22898ef600cd2ef2a2dcc80c7e6531ee36e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966934, "uuid": "d7fec6c2-691f-4b8f-90cf-ce126acb0793", "value": "T1E49312720398A07BDF392E31EF2172E771AD581C11C66C2A522DD22ECE05AC3F1F65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966934, "uuid": "a7b6e89f-00fe-4a74-a99b-e749de4f9daf", "value": "1536:eL7o/pN76DLC5g32eGAa0cikPNECb4JgACrbyhA6QNryXR8bfJ2kccPkn4uB1Ar7:oUN76WglGCRkryiNieDk4MOrnak", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776966934, "uuid": "08408d0d-d1eb-4904-847f-ae998336edd9", "value": 90928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966934, "uuid": "4c26851e-d680-4b14-ada4-c3b848f0c302", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776967104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967104, "uuid": "b8401cae-b35f-42b0-8326-4688a8e5eb29", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967104, "uuid": "b709fec5-679e-42da-bd8d-33e6756151ca", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967104, "uuid": "89998ab0-1e98-4538-9790-5780cbb4f22f", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967104, "uuid": "4a3c8a81-6116-49f0-881c-6f0918616442", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776967104, "uuid": "de8e9e5b-1c9b-4e7b-b313-a32ce19e0d83", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7848a3-3f3e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776967169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967169, "uuid": "264eea9b-f4f1-429e-8586-06ef7680b3f4", "comment": "Malware payload (Mirai)", "value": "51fcb6473c822ef88f6c6e37dcb95524", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967169, "uuid": "bd7b66da-d36f-4d27-a5e3-095ec07be0a9", "comment": "Malware payload (Mirai)", "value": "4c8fa36ee0707027b72794fbc3831c3bef22e81dc91a162895c27595ef2afaeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967169, "uuid": "b9f71b95-4be0-4c7b-91b3-1e8462e46c6b", "value": "T162246272985CC587C122627DA0EECF7ADDBE72CA2618CD01BCD118399AD5FDA3907D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967169, "uuid": "8ec8421d-ab6a-4deb-98c3-a76c71774eb8", "value": "6144:cryCkdErLtPeyXyEkVi8PJk5Mbm2pGPe0mojvAaOiHs5Y0JQO/5x+HsXTP7Ra:cryCkdEmx+MZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776967169, "uuid": "75a9b4e7-9b03-4b34-922e-760fa0154492", "value": 220164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967169, "uuid": "41baf329-ba17-45cd-bf82-a687fc08e2c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7a1cc43-3f3e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776967456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967456, "uuid": "d9446743-a8ef-4d06-80a9-ab2793951e80", "comment": "Malware payload", "value": "83ee40bb87e384f8b75735fd204adf4e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967456, "uuid": "f8fa2d45-0a76-4448-9235-1d939bcf573d", "comment": "Malware payload", "value": "2bdddcbb44629150a9333f366971dc439d6d67e925714907346d4c285fd79774", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967456, "uuid": "eeadf7f5-a2a7-4765-b577-c53f8bf323c8", "value": "T1D896339513E105E3F8A7E23E4AA66582C2B3B4105B22C9DF1BA4436A3F5B3F14D36F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967456, "uuid": "39b843d8-baa7-4f72-a43d-71e436aba7c8", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967456, "uuid": "c83eacdf-b21a-4096-8169-386ac199db8e", "value": "196608:UrtOtbW897G+x7eovq5XMP6PzFcx97WZHsoqEbRjMFb:31Fdq1B7wgZHsoqEbpib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776967456, "uuid": "c93ba029-749c-42d6-98f9-80640aaad3db", "value": 9388286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967456, "uuid": "666972ca-2df0-499d-b79c-3b951dac2514", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48392615-3f24-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776967569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967569, "uuid": "cec00a19-1cab-41e1-a2b3-b6a63e322a98", "comment": "Malware payload", "value": "32ace2e4878a93d7dec0275e05b8ad65", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967569, "uuid": "91be0ce2-1cb2-4361-aac3-453c5cdc0aae", "comment": "Malware payload", "value": "1787e869af410e1d23b67d53b95ce38c49325f6e146c5e814f51394698c4841e", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967569, "uuid": "b27b720a-d811-4af7-bf27-a519b21e00ea", "value": "T18E268E1BBDB95869C099F1348873A607F566FC441B2227D75A70F2282F3A7E05AF9F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967569, "uuid": "1a5a87eb-3d7a-4f0c-a47a-155524cc930e", "value": "3ed304ac3b75d1e430f26be59e7f5158", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967569, "uuid": "37e85b7e-4f21-4b3c-8d5d-156cf1caf04c", "value": "49152:XLeVKTZOhYYIAA8JTwmDGE5hwJ6j4emBuJOvyHjrQc2BXX2PM:XLS/vJpDwhFBuJOFDXm0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776967569, "uuid": "9bc1197c-2158-4289-bcb1-ceec2efa7bd1", "value": 4785680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967569, "uuid": "882cc134-8c4d-4433-9b3e-5b419d7f818c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "742d3734-3f41-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776968577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776968577, "uuid": "d820bee1-78c6-49f7-b1a9-a2f3c0da4cb3", "comment": "Malware payload", "value": "1c5194148698be5a90be685cba70f2ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776968577, "uuid": "6119ea04-21ae-4473-8d47-b61f71bb278d", "comment": "Malware payload", "value": "832772b0e5f33cdf854675641f7bf705817665c3b803a81f94a63aff8690b222", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776968577, "uuid": "235b5534-8488-49f7-92ed-b43a7294101a", "value": "T1C953025DA4A060D1C14EE87FA1EB9374858A24C57C497FD8C7A5CC3C8BB5B872C8F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776968577, "uuid": "55fe8fb0-4d13-4bfd-81db-c17247f3e940", "value": "1536:yoma8TGtKCTbJZH82We/Vk0LRR9LrR9FEcqdbih2JzlhQM:/maFtJzH88hLRDnRObih2RlaM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776968577, "uuid": "59f8fdce-ec2d-4a19-a449-b3720554fcf8", "value": 62728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776968577, "uuid": "247bf957-b663-484c-87ae-16a3b7ad5bc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0819e7b6-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "c889912d-bde1-48d5-9150-7fad9a8fa6fc", "comment": "Malware payload", "value": "9960d2d5edce3c52fe5c0fb8b5300e45", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "d4b282bc-5cb6-4ef9-b8db-fd42154d6ee8", "comment": "Malware payload", "value": "6c07b14bea06fa102aaa8d584014124751fd934deec25f3f63943f560c5e060b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "df16529d-e7f6-4d5b-8a45-e88dceb466a1", "value": "T19161CDD662140B37DF4ACC16BE648C4D31D852C428E6BF08DCFBB1A3D58EE48B002E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "b7b52a25-82ef-4b86-8476-e09e647dfbe9", "value": "24:5jv6r/7wU6r66rYf8r6rj6rclZ6r+xNILXkU6re6rPxGy6rfU6rz06rh356roLq3:6/7gHYf30clGlXsTPxGPNJAX3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "8769f872-70ca-436f-bffa-35f42ff11c62", "value": 3332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "c0ba32df-826f-4c0a-9301-25ebf5ecbb94", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0844b043-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "a1559ae6-2973-4611-a1ba-ca0dd2e03ccf", "comment": "Malware payload (Mirai)", "value": "e0a70e2d0f3489ec03afb2a22bde67a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "56f74610-3bcc-4b34-a4c1-c3c63fb2a2e5", "comment": "Malware payload (Mirai)", "value": "d69646fd3d22c5fa656d78976af064b3829ff3d62b9e8e664db96d8c1093fd6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "c3aa9961-9e07-4450-9fc4-1d8f41887d2f", "value": "T199B34A84F64FD0F2E94625B52137A7368732FD3A003DDA53D3A9EA32AC93510DA1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "00be20fa-aad5-4158-951c-73bbc59dd10a", "value": "1536:ao/Gy+rpPSZj6wjP2Lny2xuW7ssStWidvlWsXUJBCM+fhASiPlNFAY:auGFrpS6wqJxn7ssQ/vl1UvC79+aY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "f2bdf8b1-17ef-402c-b5c9-17ea42531633", "value": 116908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "d3a82588-ee37-4a8c-b314-39757c5c1d0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0844d721-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "3f7efec0-6972-48a7-bd3e-ffdd3fdd095a", "comment": "Malware payload (Mirai)", "value": "fc3542c93b19f48208ddb9d4b6345b9e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "c7daf9dd-1c8e-45b4-8ea8-36f3b57f2d68", "comment": "Malware payload (Mirai)", "value": "9fac8301b0ae19065fe1f37c7e3e77335c50fa0d22e1c94d0c87ecdffa6fefd0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "c31c1d99-808c-4e9d-a6f9-bf7fa34712d7", "value": "T1D1F30985BDC14B13C6D622BFFB5E429C372657A8D2EA710399225F20378B86B0F375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "1ae4b3c1-7889-40db-9f0c-d3f43941c82f", "value": "1536:/ux+FZkenU4A6Y3fkjkC5gFZYiZqW25fH4VOhEcTq+XBf4BK/fBAeQltzwywU1Ir:/ux+xARfqkYWqWc4KPO+XBf5pAz51s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "8f5ef427-258d-4d4c-b678-f4f235983ec4", "value": 162400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "14bb137d-5cf4-4efa-94da-2eab683d2961", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08477651-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "93ba6832-fea3-4c03-8ccc-dc83566d1df1", "comment": "Malware payload (Mirai)", "value": "a4e0581847f62d5621661a04d4361e2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "59a525c3-b126-4d28-95d4-9ec4856aceaa", "comment": "Malware payload (Mirai)", "value": "ad34a3f4429f174c1e1510e9164513a0991ce7bcffef174c70fb3e6cdaea2562", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "6d2cff1e-8ae4-4b00-b5fc-1ba92c345a74", "value": "T174E37C72C869AE99C124D471F031EB346B439E4645871FBA2EA7CB754047CCDFA0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "ec0fdaf5-53d1-4af2-b9b0-e9fc38217e38", "value": "3072:37nee0PIdhhC29VePp4eMFiR34+kUbmdBKuWhJ9h6XpD:3ydPyeBR344bv7hb8XpD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "81a86d8b-c5f5-4b1f-8b7f-69d6503d8b9c", "value": 146084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "2ff75a1b-f95b-472a-a6ab-e6334dcec304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "084b56b2-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "0f4db4f3-df88-4129-b04a-df716dfcae4b", "comment": "Malware payload (Mirai)", "value": "26cbec4d0d9c363bc257d28ff054473b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "3c1ecdf4-989e-4572-8de5-e8e186426118", "comment": "Malware payload (Mirai)", "value": "fa0d23c6f3e0707ae37feab80bacf7e45b784daca97c9a2dec243bf85ed1d50b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "367405fa-f3a1-4d08-8a62-30ac2a748066", "value": "T1AAF30881BCC15F12C6D522BFFB5E428D372657A8D2EE710399225F24378B86B0F366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "7e68357c-c8d2-4242-8483-14729a28acbb", "value": "3072:2cserLkEDjH9ku0F44+lgGHA3kbvr/aLs:2cJ4+9kuG44+uGHA6vbaLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "b67a6333-d864-4358-8715-27b8b49bd1df", "value": 158304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "40fb6ae7-4c99-4f77-b58d-4bea4bdd02e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08505b38-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "42b564cf-333b-4624-9c3c-7ccd0af40f51", "comment": "Malware payload (Mirai)", "value": "85b64c855d0c74e13f5058b90e907a20", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "75b6b1f6-8ee8-46f4-b9e6-380a26eb6d68", "comment": "Malware payload (Mirai)", "value": "8f51b5248323cb05faba550c4d350eeef30babe9d322e4ad127783efd4a13906", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "f6547ac9-a0f6-474a-9204-8dcff66c950a", "value": "T1C1040956B8C19B11C5D152BEFE1E428E33231B78E2DE7202AD216B24778B87B0F3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "ac3a82df-6f8d-429b-8db6-d66989ba4605", "value": "3072:xmXn/HxT88pga8wX2kBn/azwpVejqWHGSuPCtiqQbg:4/H3pgEXxB/aMXnWHG3AiqQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971832, "uuid": "3b4b2e12-9313-4b51-9c7d-913e9c090ff1", "value": 174748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971832, "uuid": "2da6bd0a-afb2-456c-86ea-a0601a5b2b8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0853b282-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "c09b9393-ee60-476b-8e96-a97f7f6c32ff", "comment": "Malware payload (Mirai)", "value": "1a1e4257d4a8bdab3b37bbcaad4044f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "481821cc-0bcb-4b42-935b-49d26158e211", "comment": "Malware payload (Mirai)", "value": "67f4a344ca29e3d8e8331697973943e740e17fe4582d873e3333d4f92099d0df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "93d253f5-816b-4acb-ba6a-860f8b5fa9e1", "value": "T1E9F33C06731C0947D1632EF03A3B57E093EF9A9121E8F740755FAA8E9272E361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "60ecd8e4-9ad6-4e1d-8b28-a09fd04618d6", "value": "1536:uBQRUl8riIHoFTb0daAFwsKUfWdxxQMF43F3ZTTNF8YZwJFT0KXwgzWvAtc0z1RD:uNiipFsWDxElZXVwL0WTt5JZ88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971833, "uuid": "05423a53-d89e-4cd6-9a9e-d64b2cb8966e", "value": 162512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "87cfdfa7-ad41-4f29-ab88-5cef207f5934", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0857c541-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776971833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "ae3b13c9-bf96-462e-9b6f-577eb4f2c336", "comment": "Malware payload (Mirai)", "value": "8fb2915dee1b86c03ed12d52c8af4015", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "288075b3-f869-4647-a0fb-69278d07b31b", "comment": "Malware payload (Mirai)", "value": "bfe8be3bbf2e578b4f50ea7dab279b241b82a1f37753e979eac0474c92fc0c86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "a02bbcc7-c345-4f77-be74-d6ec66c98ab7", "value": "T19324B60E6F228F6DF269873547B78A25975C23D627F1D685E1ACC2101F2039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "4fc6651d-28a5-4944-8a1a-76a6956711bd", "value": "3072:p04tFa/iiI8vXjD7H0qAXk62ZfEyskVqPcp5DzgXojxEciee:p7tFaJIIzRAXkUkMY5AXojyciee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776971833, "uuid": "b92091de-cb64-435f-8e4b-a8336a40bf57", "value": 210528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971833, "uuid": "2980f33d-b3bc-49df-8028-20237d54865a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92f3d58f-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "9635a78b-0ff4-4c66-a7dd-a43847cfdb1f", "comment": "Malware payload (Mirai)", "value": "e6d4a9f28b4658528aebcf14c26bf0d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "b946021b-265a-4883-9906-a13fcb97a81c", "comment": "Malware payload (Mirai)", "value": "b6652a40b6552269ed91faf6debba3cadee05ff75a5e64c0ad80d98a6115d6d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "4110c3e6-4b57-4700-9c9e-ba94d043c69f", "value": "T1A3534B32FA762A27C0E5A47A21F78B15B5E117DE21A4C65E3DB30E4BFF606406502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "35e3dd0e-68a9-4de8-a42c-b80052a57696", "value": "1536:wwkfZJxFtojQlvnrj/Byzn7dke4tuItYZ6w8+BwQHz0XYIfiV0/:BkfZJxFtojQlvnrj/a4LYZ76YN8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "8732eb35-7706-49f2-9203-99f043f51302", "value": 63480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "811c7087-786c-4d29-8cb6-ecad4ba1c59c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92f7ac1c-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "3a26e816-0329-4ff1-b892-c0d11a08bbe1", "comment": "Malware payload (Mirai)", "value": "a51419ae4af3406eb59da51f0e23697d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "dfaaeb53-994e-48b9-bf62-9f5e464ee0b8", "comment": "Malware payload (Mirai)", "value": "c2cb019ed9edecb22f05b81c2498e41cf1aaa2e35a775598a3f19f22a2e6e2fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "c0f34be6-aaf9-40e5-8bdb-3f5142c05207", "value": "T181435B52721C0E17C4A31A70263F5BE08BFBEAE021E4B685699F5F968935D331486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "a8f93a46-c1c1-4993-9b16-376f0f0b46f8", "value": "1536:eF6QcATQdskHosl9k1dP9tT0bI666hJa108:tqgtJHk1dPHgbI6x4f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "924bb43d-c69f-42a5-850e-99fb54148ffc", "value": 59764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "4d3ea86d-1e80-472d-802d-bd64822a34ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92fec615-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "b61bc3d9-8cb3-4dcd-84c3-51e39ec76ff6", "comment": "Malware payload (Mirai)", "value": "88c7765815ccce61c29e0153c2c74377", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "030b4d2a-dde0-4390-958b-27f82c338293", "comment": "Malware payload (Mirai)", "value": "b9c35f15234d67018aa9a8e3b419d163149c092401709d5748661059e5ec3e27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "dbef2c52-5109-4710-b96a-9440c9c2a65b", "value": "T1EF73F819BF610F77EC6BCC370AA92B0129CC954B22E57B367934C528B60B61B19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "ed8e0e37-8c78-416e-93bb-7721dbe79432", "value": "1536:7J5dbFB4x92nKoIya98M26ofWU+UZ9CYXzdJa10N:7J5dxBu9uKoLIUXd4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "825e34a9-fb7f-4dc5-a6c7-dc413c3beb71", "value": 77320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "b4335fa2-233a-4485-8c78-d26cd9f1719a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9305ce18-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "8fdc4270-4532-43ed-adf7-0f483c539ac7", "comment": "Malware payload (Mirai)", "value": "0ceb1f4b6815f8d2e96a34367ef63d02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "c0ba9cc6-15b9-42c8-8e82-139d12bed3dd", "comment": "Malware payload (Mirai)", "value": "5ec33cc78fe1c481f0a38563ef71d215e9a7a570540aa417a8192ff65bed053a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "eb67b2a0-4042-469b-8595-43b0ccf3e544", "value": "T1A6D34C46FB418F13C0D51779B6EF42453322A795A3DB73069A285FB43F8669F0E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "15cb91bc-4055-4c28-a72d-db0cfa00fc5d", "value": "3072:BxioDMQI5nr5aO4nt3qZg2IWu6b4MX7LkDM/94PmPw/t93:DioDtI5rcnt3qZgPWjHX74DM/9YmPw/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "02904716-6faf-4526-b53b-8fd18617e5f6", "value": 135877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "21d495a0-aff0-4426-a49d-83c6991906bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "930baf30-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "adca1745-cb56-4822-bc81-53ce22fdf144", "comment": "Malware payload (Mirai)", "value": "34ecda76ebdd3a63b06db5058a423e86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "d8f57125-a3f6-432c-bbbe-bf5b287e441e", "comment": "Malware payload (Mirai)", "value": "ac7c7a1a47ebd926b4d6ee498d2b1c7a22efc1a9b08e62d4c4fd77c52f2e960f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "d159b149-4481-4a76-96cd-ff497f7a77f5", "value": "T12B438EB4E42A9D54D0850174A8B48F750FA3F2C883621DF73BAA46B1540BEB9F60DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "a6c025e0-7cbf-4aa7-99f5-fe6d2eaf022e", "value": "768:f3Dm+BLr3pN3b3xMmWQZ7YnYhJ2wGQDmhMOfPA1eCHo1Y4dbC2WwJZY10U:bm+JDpP/Z7VrGQD8A1eb1dbC2PJa10", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "67c5f16e-42de-483b-9137-1e657f3863ff", "value": 55568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "cf8b2d48-a13c-4ca8-bfb0-4947862c0355", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "930e70c5-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "62c705a8-7cae-4415-8e4c-dc8e26d3f385", "comment": "Malware payload (Mirai)", "value": "e3d70416c6b80e1a5ff7033886eee189", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "f6fd49a8-148b-4a5c-ad76-9c8ba0139035", "comment": "Malware payload (Mirai)", "value": "5d91f13b1f639ed9b886b4aa387ac547404b4bd2062d7b205687b8de281b7539", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "fbf6e06f-008d-4fe3-b642-85ac2fa14a0e", "value": "T170331A51B8C26627C2D013BAF6AE968E373073E8D2CF3227DD611B113A8552F1DA7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "b2eed86b-7e2b-4312-b288-58914676a106", "value": "768:Mtn+Pi2RhlZoIip1jIs44nHsX7+qP06Fz20AVOstYiSF4Xgt2FgNJwJZY10Ux:MX2R3ZNiwaAFz20eOaYiSFGJa100", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "17dd3c6b-47f4-4aa8-93c9-991d5fdefb59", "value": 51716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "66e6660a-128f-45b7-a271-0f07fbff9db0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9310480e-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "784a00bd-6086-4a11-8585-3c8c0b56a083", "comment": "Malware payload (Mirai)", "value": "67a060d0b20d312a7b3209810ea1402d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "c151656e-04e2-4086-ab57-b2fa37cea611", "comment": "Malware payload (Mirai)", "value": "4840d3a792ab95779658c2bf75271c471edb81a2887ebe4b9a81dc57ff3ea50c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "c058cade-2bef-4ad5-bbb5-c6b4297c61b4", "value": "T187533A51B8819613C5D4137BF6BE428D3B2523E8E2DF3217AD222F413BCA82F1D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "4c867f36-be6d-450e-a31b-b13a0cab6284", "value": "768:lP6aHMzAR6hM2uQBTPpdxnlILKU0vVONyQgGhd2G4NMiplImpcvwJZY10UPZvBqJ:0aHuAzgjjfUKU0NONyQgG+7XtJa10oB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "bf257886-31cd-4a1b-ae15-20c954e8bec3", "value": 60760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "8438020c-ca16-403a-90f9-50ad1b397d8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931c13eb-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "982294eb-67ed-4c3d-a8eb-84d0abe0b7a4", "comment": "Malware payload (Mirai)", "value": "ac37e99f50f0d13aa6970e60ecb6915f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "d61a22c7-15ab-4086-9fee-18a464232b1e", "comment": "Malware payload (Mirai)", "value": "0fe350decb256b062c281009d628a21db7ea7a2af94609f1c9687faece8a6dda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "f3fd514d-07d1-47b0-b316-e14929a938f6", "value": "T1C873C70A7E229FBCFB9846354BB78F159A5833D627D1D641E2ACDA001D7024E341FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "fda24301-822c-422d-863d-f98d873b9ad1", "value": "1536:bpxe5qoct9fdlQBI6rfEnUFndlBotYG9CJa101Dv:Fx3oANdorndvomgC4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "f0609184-fdc1-44d3-b50f-ed5d84dd2839", "value": 77288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "a3ae9740-9336-4604-842d-fe35f890f850", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93233dbe-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "dd5d2f2e-6305-4297-99d9-ee4a3ab571c3", "comment": "Malware payload (Mirai)", "value": "5deaf04e391f5687674da38e424a99a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "849718e1-084d-4add-9bad-ba4cb34200ae", "comment": "Malware payload (Mirai)", "value": "2a3fc6c5bf91df62bd406e9f6d082010283c564ac281a464757bf983bbf2e6f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "ae4d89f0-d97f-4065-8fe0-b2bd9cc21537", "value": "T112B39DABF2071591C8A346F007CB4FDE6E1722C29F57C4E36C6E253E58750DB1A0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "271277f0-ac5b-4ad3-baa0-385fba9d3733", "value": "1536:Rg4uLcytbI96ffY2aye7tcOiyRLqlqOgb3a10S/LWmoo:e4uLcytU96HY2JatcwRLqlqOgbWTqmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "ea7e37a6-e682-489c-a7d2-cf669b171d16", "value": 117288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "c692b54b-6fd0-441b-8a61-0f12f39cc2bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9325507b-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "fb81a4fe-789e-44bf-a378-b9163edb8fe4", "comment": "Malware payload (Mirai)", "value": "ac44638d496587f83fe713cbcbd44e97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "13a44b79-395d-40d4-a51c-780012defd4d", "comment": "Malware payload (Mirai)", "value": "391895724431b2e656fc557b81ff6f81c075b442b262b2dd5d245c651bfceeac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "49c88eb1-0e0e-4264-8c93-b0cdf0c9ad2d", "value": "T142431917F94685FDC089C234177EBA3AE92331FE1229B26A67D4FB263DC6D611E09C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "f3c6b941-4e88-415e-b5fd-bc919677bba3", "value": "1536:1XIY73si3qEToSRhINNQ/K6C8u50pfEHwNLW:2Y7H6ETRhIY/Kn5qEHw1W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975501, "uuid": "93e42047-11a8-4605-8086-ee1ef8b1e49c", "value": 58480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975501, "uuid": "eedfce6d-ac8d-428f-9324-43eed3eab719", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3b3641-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776975624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975624, "uuid": "82ee0e0b-9d5e-4eea-b388-dc5e553bee62", "comment": "Malware payload (Mirai)", "value": "60055461bc85e2f2f97ca63cf7498ebc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975624, "uuid": "f6f40b33-2a31-4a84-9058-1c6dc4018f3f", "comment": "Malware payload (Mirai)", "value": "d851e88253567b32318d7f3e91c7c9cc890be0990b661a50fff6ad3811977049", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975624, "uuid": "7185ea2e-2d4d-40d5-bb27-83e1b16a1d23", "value": "T1AEB37DC8A243C0F2D45701F1613BE77B6A32D5B96119EE86E378D931ACD3842E626B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975624, "uuid": "7ef5747b-2220-4598-aaf8-b73404eb8dd5", "value": "1536:x6+jOEvzgu7MmBlHT8QufpLXwf5dx0ldnuOsEZTsukaWHNSrMJMIL7mcY:xQEbPMmBdjufpLAf5P4dntsEZIuYkf4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776975624, "uuid": "b3f14ec2-b97d-4ef6-ba79-029950e20133", "value": 108936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975624, "uuid": "de991714-ae99-4eba-befa-4bc230454097", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0655f959-3f53-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776976124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976124, "uuid": "0367900a-0675-44b9-acd6-95f1b6d9f3ac", "comment": "Malware payload (Gafgyt)", "value": "b281d6f4cf23f7ae7fd031b29a5809e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976124, "uuid": "7c5ab413-39b3-48a0-ad95-c115037aa57c", "comment": "Malware payload (Gafgyt)", "value": "15cbd2d8067d46320cf95af436b6fa3f3cd296286d9337e8c277989eb27fce8e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976124, "uuid": "38723055-513f-4bb0-91fa-5366083c76cd", "value": "T1E7630942BB42DE77D00320F212E79B660931FD7E1826DA4AE3647DB5EA351C0D616B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976124, "uuid": "5789647a-4c77-4e60-b3ce-58184950d2bb", "value": "1536:j45PKEB5NIjZxwTkKOdNK3+BvzyIKIkoo25oC7mR7S4v1Q/wxg:j45PKiIPB+OBvzyKoCmRnre", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776976124, "uuid": "a43a25a8-0317-4a5d-ab35-f5b8e9592489", "value": 71388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976124, "uuid": "0fa7005f-606e-4c22-9a73-61c3bde35f2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9e9b8a2-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "217bec46-c17f-48ba-a051-b5e6c95299d9", "comment": "Malware payload (Mirai)", "value": "7c0daf97db4b2f711d62f73f7ca2a401", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "fa6a0ce9-f6ff-4d77-b256-f1facdf43c43", "comment": "Malware payload (Mirai)", "value": "ef444799aba5d5230195090c9c336a80695aaa0f0fbc2240bc886bfecec9ead6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "753a6224-5bdc-412d-9956-4a09c067125a", "value": "T1B7B36A72D8296E58D165C0B0B0F48FB92B639AD092875FBE15B3C2745083D8EF585B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "a154624e-3828-40fd-bf76-1de94354b620", "value": "1536:G18VAch2QBpafxVxh5Z+okCNKUw1KeXf8KXXAGWOrp7X8QXLI:G2BdBAZ+oklUW8KAGW2p7NXLI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981257, "uuid": "7d4d176b-9691-494a-bf06-c7960ff4f6b4", "value": 113472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "f459b5ae-da92-4e6b-a00a-11cf105d5ac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9fa2043-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "7ccd5035-a26b-423c-a4d0-d50ef6b5bf49", "comment": "Malware payload (Mirai)", "value": "1151008bf6424b6d7e6f3f49248ba237", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "5a41a838-658f-4cf6-8bb0-bd1243c90d93", "comment": "Malware payload (Mirai)", "value": "1114247017846263077a1bebeb5088dc6e520e312c6610b9a983dc723bd1e56b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "33e3b339-f362-4b47-bf10-529ce5add19e", "value": "T127C32A06B30C0947D2632EF03A3F6BD193EFDAC121E4F641256FAA8991B1E325546D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "87be18c6-38ca-4b1d-9e5e-da2a8bc60cfa", "value": "1536:7fGNdxfWDO1zgwlaxpivT5Not6mGBgKnLM0xvALImeyynknqvjhkwALDYlH:7YJewlax875gUgWLM/LpwALDYlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981257, "uuid": "e249e95d-0bd2-4053-abc9-c3544996e6a5", "value": 129916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981257, "uuid": "2ffcd50a-7685-42d6-9569-e97c9ce9d33e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbc868cc-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "8ebc61aa-6d09-4ddb-89fb-be40ad8ffef5", "comment": "Malware payload (Mirai)", "value": "fcb37bc995dade17e5987707724687e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "6d07ea8e-478e-41df-a249-7afa78f772e5", "comment": "Malware payload (Mirai)", "value": "a494a750cae8ed06924a1a73206fdb916968ceddcce71ecd06b1ad98472f20c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "1479b110-504b-4b26-9c45-008ab75196ce", "value": "T1B5C30945F8415B13C6C212B7FB4E438D7B2A17E8D3EE720399256F61378B96B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "5a4d3441-9d55-410c-b7e1-6783732bd36c", "value": "1536:p039BtGG8bQFPAu+64VpY9/TZxFekPKIjkz70BMlecxwywOF28QnHk3toFWKbOJD:p081UFPx4oBlxFekKH0g97FwLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981260, "uuid": "6d91c042-72bb-485f-8b97-d04fd19bdde2", "value": 125696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "9e3e16d1-4b4d-4570-ba1c-073d28d1e457", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbd53411-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "b5cc04f2-477a-4771-bbf3-5e6841072ddb", "comment": "Malware payload (Mirai)", "value": "ad9e3d0923e4921949a382ee120fa95f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "8c92875b-8fab-4827-b013-ddfb02067856", "comment": "Malware payload (Mirai)", "value": "63514f949cf6b4839db72f7c0756e177ad8274851cf6735330738514dc5e179a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "2580c89c-30fe-4863-8027-98269610bd02", "value": "T148F3885E6E238F7EF668873047F74E25976823D623E1D684E1ACC1145F2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "0d91ecb5-6f46-4fd8-920d-b5091a11c316", "value": "1536:VXK95pZAla7e1fHPOix3E4+0hIxQgAai67kUJSMqXGLeXv3/lwqgTPnKWWO306xB:VXKrJ7vAaiMkySPXG0v37oRW36xALls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981260, "uuid": "3c3e0d2a-2728-4a29-9333-02b982802d7b", "value": 169648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981260, "uuid": "ec2494a8-2689-4bdb-a675-4da0eff9e196", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbda5995-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "1b9f6fd3-2557-45ad-9ade-bf72d8ea8ffe", "comment": "Malware payload (Mirai)", "value": "2778ca6c7fb77c7f04285e2feea078d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "b41245a2-3247-478a-b879-26c5fd6b5947", "comment": "Malware payload (Mirai)", "value": "ee2383eaed43f5ff5f6baeb090e01ea5f38cf1b01dc15618b1e064328cb24403", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "5f07b46b-fd00-4eb1-b988-3b562dc60ae2", "value": "T10F837CC5F783C4F1EC9305B2503AEB369B33E0BA1069EB47C3699931DC52911E616B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "0804bd56-31a3-4b67-9405-3f39aaf21421", "value": "1536:w9dSNhnFHpZqwGLcSaDwmdxWxVYOAS3tghx:w9dWnFHpgvGDHPWDD9Wx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "f5bf30f9-b5a4-4112-960a-281c2d43b15a", "value": 88424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "2e2e53db-3994-41cd-b5e5-49d546006a19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbddb675-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "704753a5-995a-48c6-b12b-fbbb80dbcf29", "comment": "Malware payload (Mirai)", "value": "6bcbd0594d44520cb81194ee501dc7d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "042f48fb-7176-43e4-b314-18c2991a333d", "comment": "Malware payload (Mirai)", "value": "4c7f9344cc2b2932fd52f27f474d309eb857bece6e792460c2419155217bd0f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "5b54065f-235a-4f38-9db9-5c724ecc306b", "value": "T1A6C30855FC414B53C6C212B7FB4E438D3B2A17A8E3EE720399256F61378B95B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "59c13e5a-f635-4068-aa6f-40004b331ef5", "value": "1536:4QVhx/9YIpH08Y1kA1Dg4VxogTVP7b7+O/vjpCh5D9l4nwywMFsf749XFlGWdOTM:4QjpUt1kZ4ggRP7b7J7pCjliL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "6da17e21-0647-422e-9901-e482edcead21", "value": 125696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "a810fc0d-ee83-4fdc-95c8-4dd449eebf50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe1736a-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "e0049f52-62a0-43ac-a2ca-cd12cedf4f09", "comment": "Malware payload (Mirai)", "value": "6d7fc7ef876da9fc77887867db581238", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "881e7612-267a-4f9f-83ba-a8f704ce2307", "comment": "Malware payload (Mirai)", "value": "e4d7e55adefa71ddbf1fac99e2dbe78bd6d8212b1d26d30a8de5de4b4ea9d90a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "55e58f49-06b4-466f-a3b1-adfc1e665e8f", "value": "T1D5F3C81AAB510FBBDCAFDD3702E90B0238CCA55722A43F763674D528F54A50B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "40439f9e-5162-4de7-ae66-a5b61dce6558", "value": "3072:MhdpFxtbYbyXO2o8TIUU9ypqnNJg049Loz:MhdpFxtb0ye2hIUQygnf3KM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "bc518dd7-a5a7-4b1b-a061-296f677899cc", "value": 169648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "f7171a1c-c4f4-4caa-a1ed-059bf138daf3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe60ec5-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "e6abde63-bb11-4a3d-97e3-1a7023c33c4a", "comment": "Malware payload (Mirai)", "value": "b9ae1cb9faecd03f2bf63bf7e60b5145", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "0c96d582-ee12-4cda-8229-9360ac5da5df", "comment": "Malware payload (Mirai)", "value": "09213ecaabe32c8322ccde114f544ffc69efa615707a60b6c76269d5b2cd3296", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "9953b1eb-0048-4637-b622-d82828a43291", "value": "T137D30A56F8819B12D5C111BAFE0E124E37131B78E3DE7302AD246F747B8A97B0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "8bb498cc-365b-4aa9-b3a2-185e38da39a6", "value": "3072:UAUg6+4WXrdM2gUa5RhBc/b6FCAU3CR5nK:UA7CWXZM2JaDfFdU3CRZK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "8998190b-51ec-4847-af86-aec270db3ea5", "value": 138044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "00897fce-cc2a-490d-839e-1f8c8a0869e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe69768-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "a9ccd626-5bfd-4216-a85d-b0b4ffcf2caf", "comment": "Malware payload (Mirai)", "value": "9eb68dd06527ab24eb93744ece63a90f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "24846a63-a734-440a-b6a3-4d7ef1edf2de", "comment": "Malware payload (Mirai)", "value": "4fe0aae75c6275ff912aa595a2222776f8a803413b761b9c24de20ab76887529", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "5f293679-eac2-495f-a2b1-61144ed3ef3c", "value": "T1CDE308D7F800DEFAF80AE33748530905B130BBE145925A373297757AED3A1991867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "d0c43e4d-8ef9-43de-a73a-07ed2d0ad70e", "value": "3072:QFaUxSQpRDtx55WXuSNsm0QHS0hIATlam/0VrjbiULITViMyRxodp:6a1y0qAEm/cLITNyRCdp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "956c97d9-8e98-4d68-a21e-f746e33edbb4", "value": 146080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "ec1922f0-998a-4b97-b57c-f60dd80cc383", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbeff58a-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776981261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "399c8aab-f014-41f5-b89e-fc34b5538ade", "comment": "Malware payload (Mirai)", "value": "3c0dd906782e96bd46560fb24c3a9093", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "970b1425-c0bc-49cd-836b-a93a090079a1", "comment": "Malware payload (Mirai)", "value": "5c8b52c7266289791cd96d8d215009830d73c51849d42ec14cefd977066d4298", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "b1bd1977-cb25-4db4-a801-9e521031cfd4", "value": "T1AAD33A1BB4C180FDC4EAC1B44B9FE636DD32B4AD2234B15B27D4AA221E9DE305F5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "0f07d4ce-4e70-4d34-b578-2312fa055969", "value": "3072:Gw2qNWLADAob3EF+aogCVE2Mwf6cTOyYgwG:GwbD/BXvwG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981261, "uuid": "e2e84159-3fc2-4b28-9698-087a95f664f7", "value": 135480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981261, "uuid": "a75f2f51-602f-4d60-b338-5ff654c1c1b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f36995-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776981435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981435, "uuid": "5c9b7a7e-bca4-4679-9a26-286c9d68f8a8", "comment": "Malware payload", "value": "2d33e3d2c63611f24ae84ad01115393c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981435, "uuid": "2bb40dfc-d1fa-4de0-b751-eae1503b0a3b", "comment": "Malware payload", "value": "420da74d2ed22eb5b9debb15e8ca69760542cbac09b845413c72c85111336fde", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981435, "uuid": "3eeb7690-ec36-4046-9fcb-2e68b4d93710", "value": "T19701F7C5F4A4AA92E4446EC2B061950740D7FFDC13791FC84A9C38F68C5E910B453F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981435, "uuid": "f73c5587-1f7e-4685-a8c7-1ba5d08b55ae", "value": "12:3WKDyPIacxQZrKwlE8eAZrKnwAZrKGF2AZrKGcnd2AZrKVzZrK07:GIYcxQZeR8eAZenwAZe02AZed0AZeVzh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776981435, "uuid": "e7da2483-31db-4e5f-83c6-b6e2381a0a62", "value": 706, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981435, "uuid": "6cdd7969-1a89-4c9d-b0fc-5427e08044e7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c82fd483-3f61-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776982462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982462, "uuid": "3ad1380f-b88d-4cbd-be95-830ce8938abe", "comment": "Malware payload", "value": "bd5273ebd19b5c5de76489a4fe445e74", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982462, "uuid": "cf61bdc0-93af-4247-b01f-74110384cd65", "comment": "Malware payload", "value": "424a5d4dca5fb9506e7a15abc95d9e8b2a8c91fcf340394db86e38342afe7ab9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982462, "uuid": "02aff3b2-48da-4511-96ba-43411bbe2260", "value": "T18FA6330FCC65E80DB891301902B6477E47411C96FF4C5E2FF2E88D7AFA9A9757086E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982462, "uuid": "53a515d6-cdc7-451a-91fb-09dfb79a4d35", "value": "196608:kIjQHtk0O7Jrd3AHhzMea1cVN2aFHXr0XtGeom6f2UvEmty5:bQS0AwBzNDVFHqdv0xvRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776982462, "uuid": "c450585e-87e5-418a-91da-bae359b03307", "value": 9687056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982462, "uuid": "3c69897b-4eeb-435e-9f42-ce7f65caea1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df796f19-3f6d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776987655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987655, "uuid": "d0af9371-c03c-4b4b-a5c8-3d6eeb59f4c1", "comment": "Malware payload", "value": "1beefff39c6aed8ac8aa734649e9f0eb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987655, "uuid": "cc09baa3-48d9-4035-b3af-7b46385fe9b0", "comment": "Malware payload", "value": "b515b4ebe06041f29b19c8eb918fb290de044f2f5b7270e1c4e6ce7f0521d66a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776987655, "uuid": "1b6d57b2-a8e6-410c-95fd-ca2b7e34b475", "value": "T1B793E884FE059B1BC6D372FBEB9D028D362B1FA8D7EA311699317EA023F55D1193A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776987655, "uuid": "7b5d5cb4-3282-49ab-a3d0-1f0281f9759f", "value": "1536:8fxz4InbiuwDn+1GlEiLoOnnCSKp3nYW0IvYoSPt/:XDDn+1ViBCzt54/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776987655, "uuid": "db84f554-a429-4295-9f2a-ce97c57022d9", "value": 91064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776987655, "uuid": "622d299c-51b2-4797-8b1d-3f4eaf493f81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902422, "uuid": "6c38c153-3ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-8k.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902527, "uuid": "aada1399-3ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.3:53750/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902723, "uuid": "20235a3b-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.94:60123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902766, "uuid": "393e632c-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-v1.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902827, "uuid": "5d950a7a-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.86.82:43844/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903082, "uuid": "f59f357d-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.0.69.242:60643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903132, "uuid": "13aa0a89-3ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-9.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903428, "uuid": "c424cd79-3ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-4m.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903555, "uuid": "0f7c96a8-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.89.247:49161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903742, "uuid": "7f03a1f8-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.65.52:39939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903742, "uuid": "7f0a2c17-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.182.189:60731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903786, "uuid": "99a435eb-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-w2.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903909, "uuid": "e28519d1-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.33.112:49917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776903981, "uuid": "0dccf5a5-3eab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.49.213.85:59688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776904087, "uuid": "4d1c3544-3eab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-5b.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776904450, "uuid": "252a435a-3eac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-1.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776904754, "uuid": "da2ec695-3eac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berg-9z.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776904878, "uuid": "2470df93-3ead-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.0.69.242:60643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776905047, "uuid": "891d89a4-3ead-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-4.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776905410, "uuid": "61b6d3ec-3eae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-s6.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776905719, "uuid": "198f6431-3eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.139:44685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776905767, "uuid": "367f17eb-3eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-2.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776906067, "uuid": "e929f57d-3eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-8v.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776906366, "uuid": "9b31025f-3eb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-3.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776906438, "uuid": "c5fe292d-3eb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.26.101:57017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776906788, "uuid": "96e7b1db-3eb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geld-x5.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907027, "uuid": "2562a6ef-3eb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.64.176:45219/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907088, "uuid": "495a4d9b-3eb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-6.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907450, "uuid": "212aa7b9-3eb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-y1.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907573, "uuid": "6a83ceb8-3eb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.26.101:57017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907748, "uuid": "d319c2e6-3eb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wald-9.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907872, "uuid": "1cc549e5-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.60:34423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776907927, "uuid": "3d778fe3-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.25.188.237:52310/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908052, "uuid": "88684f3b-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fire-2m.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908226, "uuid": "efd6aba6-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.64.176:45219/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908414, "uuid": "5fe9dab2-3eb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-5.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908592, "uuid": "ca3cb223-3eb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.209:60063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908768, "uuid": "32d1aca2-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mond-q7.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776908827, "uuid": "564dc6dd-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.96.54:55788/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909066, "uuid": "e4ac38ab-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-1.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909196, "uuid": "322abe06-3eb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.33.112:49917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909380, "uuid": "9f7cba0c-3eb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.196:51072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909670, "uuid": "4c57b1cc-3eb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-x8.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909727, "uuid": "6e44825b-3eb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.25.188.237:52310/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776909847, "uuid": "b61eecee-3eb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-4.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910026, "uuid": "2108ef77-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.96.54:55788/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910087, "uuid": "4505096c-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-4c.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910099, "uuid": "4c834c60-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.204.209:60063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910163, "uuid": "72517db9-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.153.227:37804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910449, "uuid": "1cf5a24a-3eba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-9.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910686, "uuid": "aa59c1a1-3eba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://baum-1s.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776910992, "uuid": "60a224bd-3ebb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.196:51072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776911109, "uuid": "a661d630-3ebb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-7.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776911237, "uuid": "f25cfc48-3ebb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.82.242:55263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776911349, "uuid": "35473d37-3ebc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-3z.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776911595, "uuid": "c8454e4f-3ebc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.164.103:51383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776911769, "uuid": "2fddcba4-3ebd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berg-5.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776912068, "uuid": "e216173e-3ebd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-8v.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776912427, "uuid": "b7d92245-3ebe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-2.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776912730, "uuid": "6c5bb258-3ebf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-6x.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913027, "uuid": "1d7bdfad-3ec0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.161.3:58696/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913087, "uuid": "4170bc18-3ec0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-3.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913089, "uuid": "426d6926-3ec0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.5.97:59491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913453, "uuid": "1b5b6997-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-1p.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913456, "uuid": "1d08fdbe-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.207.172:41130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913812, "uuid": "f197e98d-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-9.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776913927, "uuid": "35ed3aa9-3ec2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.201:39967/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776914227, "uuid": "e8a28a1f-3ec2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moon-5z.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776914227, "uuid": "e8a29be7-3ec2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://moon-5z.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776914843, "uuid": "57b362d0-3ec4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.207.172:41130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776914887, "uuid": "7256a405-3ec4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-3.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776914888, "uuid": "72ed0ead-3ec4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://rouge-3.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776915203, "uuid": "2e9bdcaa-3ec5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.84.132:33258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776915727, "uuid": "66ee426b-3ec6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.249.21:46922/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916027, "uuid": "1993942f-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vert-4b.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916027, "uuid": "199b4bdb-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-4b.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916155, "uuid": "6631e6f0-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.124:53177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916207, "uuid": "84d8c22d-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kalt-6.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916207, "uuid": "84dde446-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-6.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916509, "uuid": "393584db-3ec8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-9q.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916927, "uuid": "31f200db-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.82.94:38633/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916928, "uuid": "327fb7bf-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.249.21:46922/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916935, "uuid": "370cf68d-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.45.36:51483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916935, "uuid": "3719e220-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.211.191:58281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776916988, "uuid": "569c7fb6-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-5.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776917292, "uuid": "0bc3c225-3eca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wald-2x.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776917310, "uuid": "168c4b41-3eca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.161:34932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776917648, "uuid": "dfd0536d-3eca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.13.223:38421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776917709, "uuid": "03f61da6-3ecb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-7.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918066, "uuid": "d917e5bb-3ecb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-3k.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918132, "uuid": "003fb4b4-3ecc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.36.59:46902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918427, "uuid": "b03602a6-3ecc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.164:54855/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918438, "uuid": "b6a9d1d7-3ecc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.211.191:58281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918677, "uuid": "45326bd5-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.148.221:56493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918727, "uuid": "62fc2f05-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.164:54855/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918859, "uuid": "b18f72a6-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.41.190:36206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918910, "uuid": "d01fd6ce-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berg-8.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776918967, "uuid": "f1e6cda0-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-4z.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919268, "uuid": "a52e7da6-3ece-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-2.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919328, "uuid": "c8fe898e-3ece-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.162.21:53945/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919330, "uuid": "ca92c314-3ece-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.75:40518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919633, "uuid": "7f380ea6-3ecf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mond-1v.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776919945, "uuid": "3914aa3d-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.185:32884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920183, "uuid": "c6db9bff-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.95.17:59959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920352, "uuid": "2b769882-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-9.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920367, "uuid": "3436c812-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.46.199:44955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920415, "uuid": "50e15d10-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.30.48:55546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920482, "uuid": "78ee5cde-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.45.36:51483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920534, "uuid": "97c1a2c7-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-3m.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920833, "uuid": "4a056df7-3ed2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-5.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776920843, "uuid": "4ffe89f3-3ed2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.69.126:55329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921255, "uuid": "45cff4fe-3ed3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crawleramp.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921375, "uuid": "8d6afece-3ed3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.75:40518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921498, "uuid": "d65c5924-3ed3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.58:47466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921634, "uuid": "27f3c28f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.28:48688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921675, "uuid": "3ff07bb2-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://encod-logic.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921675, "uuid": "401115e9-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921677, "uuid": "41065807-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.95.17:59959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921682, "uuid": "44688259-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921684, "uuid": "45aff9b0-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921684, "uuid": "45afffa5-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921686, "uuid": "469fe427-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.130:35736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921727, "uuid": "5f4cf8c1-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.141:35263/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921731, "uuid": "618d9e3a-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.69.126:55329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921732, "uuid": "61de5dc0-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.185:32884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921848, "uuid": "a71a1664-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/d", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921850, "uuid": "a89d5fd1-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/d", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "acaa6b05-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "acad8ea7-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921857, "uuid": "acb51268-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ad2a76eb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ad31676c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ad32038c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ad4b9a1f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/wawan.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921858, "uuid": "ad7ef716-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ad81bc5f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ad86e013-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ad8999d4-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ad905ad0-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ad94aa1c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ada0427d-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ada3e2bb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ada7ac06-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "adc902a0-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "adcba6b2-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "adcc7864-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "adcc93ef-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "add97aa8-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921859, "uuid": "ade261a9-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae1c371f-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae3af824-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae3b0a2d-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae3cb855-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae3df621-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae573faa-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae5ef2af-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae5f42ce-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae6090fd-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/dlr.arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae60947a-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae62729c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921860, "uuid": "ae628531-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/svc.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921861, "uuid": "aed498b8-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921861, "uuid": "aeeef813-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "af75fb7d-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921862, "uuid": "af8e3fcd-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/inqcode/skq12kjj3jj1/raw/refs/heads/main/svchost.zowner", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921863, "uuid": "afe6fd28-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.222.254.210:8079/52.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921863, "uuid": "affaf2eb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.222.254.210:8079/5252.exe", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921863, "uuid": "b0536483-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://desktop-version.com/app", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921912, "uuid": "cd4712a6-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/download.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "cfc4ec3d-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "cfe312b1-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/dlr.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921916, "uuid": "cfe66ec8-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/svc.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0315587-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d031e92c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.91/update/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0361912-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0387119-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.10.36.54/triangle", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d03b1dfe-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d044cae7-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0464a3b-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d04b51c7-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d04b7531-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d04ccff2-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d05b5edf-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d062b554-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d06440b7-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.140.244.57/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0727c89-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.203/gertgherthre.exe", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0822910-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d09691d1-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0a50ad5-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921917, "uuid": "d0a58b9b-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921918, "uuid": "d0abd790-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921918, "uuid": "d0ac9ca2-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776921918, "uuid": "d0ad47a6-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.109.100.133/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922039, "uuid": "190f825a-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulspost.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922048, "uuid": "1e2d6203-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.36:42374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "38a4aa6c-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/salesplataniik-commits/updates/v1/1583.txt", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922092, "uuid": "38e17c65-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/salesplataniik-commits/sales/raw/refs/heads/main/NRRWIHQIDTHWSZEL.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922352, "uuid": "d397c464-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.57.2:55005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922453, "uuid": "10089dc2-3ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://port-dat.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776922747, "uuid": "bf4e6e14-3ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ambe1-point.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923228, "uuid": "ddf5c09a-3ed7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.9.35.137:41852/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923244, "uuid": "e70a7276-3ed7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.57.2:55005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923309, "uuid": "0de0ddbb-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.28:48688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923415, "uuid": "4d217a6e-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ejm0c.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923652, "uuid": "dab3347c-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencrest9um.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923668, "uuid": "e4246c01-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.10.192.9:55589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923846, "uuid": "4de862c8-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.36:42374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923908, "uuid": "734cb6fa-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.249.123:41837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776923954, "uuid": "8e37b509-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ljzoiu.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924127, "uuid": "f5b6ba31-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.51:54089/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924257, "uuid": "42e189ff-3eda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.123.111:41367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924373, "uuid": "888a2b68-3eda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://storsens.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924623, "uuid": "1d61f330-3edb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.207:34611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924734, "uuid": "5f81b451-3edb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://so1id-sheet.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776924802, "uuid": "8827cf53-3edb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.130:35736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925027, "uuid": "0e5765e2-3edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.98:46505/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925216, "uuid": "7ea78b14-3edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bui73.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925288, "uuid": "a9e09365-3edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.249.122:39684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925326, "uuid": "c075029f-3edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.39:44119/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925331, "uuid": "c3839b98-3edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:46719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925579, "uuid": "575dcd8d-3edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-valeor.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925586, "uuid": "5b403900-3edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.207:34611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925643, "uuid": "7d4578ca-3edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:54280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925761, "uuid": "c346c720-3edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.139.50:45332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776925873, "uuid": "06307315-3ede-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr0vvt1-port.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776926000, "uuid": "52048195-3ede-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.8:39536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776926288, "uuid": "fd8fba2f-3ede-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://v3lve4-core.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776926773, "uuid": "1f034199-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://753s.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776926827, "uuid": "3ed9221e-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.197:52798/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927012, "uuid": "ad4dfe6f-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.18:44434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927130, "uuid": "f3a6eb27-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zkmoskj.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927489, "uuid": "c98aeb8b-3ee1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.173.8:39536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927549, "uuid": "ed1fbcc6-3ee1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu1ck-flow.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927678, "uuid": "3a628607-3ee2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.171.125:53623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927790, "uuid": "7d2901d5-3ee2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.139.50:45332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776927911, "uuid": "c54b694b-3ee2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4sset3-node.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928218, "uuid": "7c2c1dee-3ee3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.35:58018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928268, "uuid": "999c0f42-3ee3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://notifieropti.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928687, "uuid": "935887cf-3ee4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://277lk6.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "214c67ef-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://missusecapmrch.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "216a1f8e-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://himachaly17aplr.blogspot.com//////////////////////////////////////scooba.docx.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "216a30b7-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nadcapfeb25-26.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "2185e771-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://paypal.auth-sharefile.com", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "2188ad9b-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/atom.xml?m=1/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "218bdc6f-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_5408372e708a48629b728d0ea386361c.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "21905666-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://htlwub00k.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "2190f81e-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://missusecapmrch.blogspot.com/atom.xml?m=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "21b7ab9d-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nadcapfeb25-26.blogspot.com/atom.xml?m=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "21b7b77b-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nadcapfeb25-26.blogspot.com/march.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928925, "uuid": "21bbef64-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/ailimius.otd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928926, "uuid": "21caeb86-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_e294b64717f9404887beb0ddc0ef324e.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928926, "uuid": "22560c2f-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.224.78:45371/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928927, "uuid": "228b6fe6-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/ailimius.otd?m=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928927, "uuid": "22938ee9-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928927, "uuid": "22a747d9-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_95941126f4e0499ba380d354c8f595e2.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928927, "uuid": "22c3764c-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/atom.xml?m=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928928, "uuid": "23006592-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://htlwub00k.blogspot.com/phukli.docx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928930, "uuid": "242a2143-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://missusecapmrch.blogspot.com/ailimius.otd?m=1/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928930, "uuid": "2498af4e-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://himachaly17aplr.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928931, "uuid": "25117ecd-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_5408372e708a48629b728d0ea386361c.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928934, "uuid": "271deaca-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.212:50911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928935, "uuid": "276623ee-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.128.38:34555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776928988, "uuid": "470280da-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.183.5:48771/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776929050, "uuid": "6c2f40f9-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://north9-line.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776929228, "uuid": "d623741e-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.136:33777/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776929525, "uuid": "874c620e-3ee6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.140:53758/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776929543, "uuid": "91f37d12-3ee6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.173.199.8:58428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776929769, "uuid": "184e6c5f-3ee7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.35:58018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930190, "uuid": "137aad04-3ee8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gran-sync.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930246, "uuid": "34f792a1-3ee8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gdvdjt.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930610, "uuid": "0dae5beb-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkdraa6.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930727, "uuid": "53698261-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.25:39995/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930727, "uuid": "53825189-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.66.241:42546/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776930732, "uuid": "5681c94b-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.133.136:33777/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931027, "uuid": "061ead01-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.25:39995/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931027, "uuid": "064c4027-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyp3-plate.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931278, "uuid": "9c0026b0-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.72.102:51830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931389, "uuid": "de2d9ccd-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voicebund.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931400, "uuid": "e4e166fe-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:49916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931402, "uuid": "e59fb7d4-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.168:46002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931406, "uuid": "e85de453-3eea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.173.199.8:58428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931452, "uuid": "03a12fd0-3eeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.168:46002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931814, "uuid": "db52adbc-3eeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://majorbright.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776931930, "uuid": "209f0ad9-3eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.41.153.146:36256/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776932168, "uuid": "ae42bb82-3eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-lab.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776932226, "uuid": "d14b6010-3eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.164.128.58:46877/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776932361, "uuid": "212eb74f-3eed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.214.189:44576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776932648, "uuid": "cc68ab42-3eed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pds6zjwn.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776932719, "uuid": "f6b7e8d3-3eed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.84.132:33258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933129, "uuid": "eb131f11-3eee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.28.83:42585/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933138, "uuid": "f08c6f7a-3eee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.192.217:46665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933191, "uuid": "102349a6-3eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.227.156.100:2578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933259, "uuid": "38d9638d-3eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.146.77:60722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933319, "uuid": "5c74d183-3eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.192.217:46665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933427, "uuid": "9cceadcf-3eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.41.153.146:36256/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933449, "uuid": "aa29fcf2-3eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.223:44416/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933726, "uuid": "4f396651-3ef0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.140:53758/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776933727, "uuid": "4ff4053e-3ef0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.179.64.34:58175/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776934100, "uuid": "2e3d091b-3ef1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.180:33416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776934101, "uuid": "2e5a24d0-3ef1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.147.89:60389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776934159, "uuid": "510e1dcf-3ef1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.226.192:39217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776934515, "uuid": "25984832-3ef2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.181.193:44969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776934937, "uuid": "210b1e0e-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.46.214:59412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935118, "uuid": "8c7ecb6c-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.72.35.225:39291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935121, "uuid": "8e98a555-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.53.69:50615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935121, "uuid": "8eb02e1f-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.166.95:49892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935226, "uuid": "cd377c87-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.223:44416/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935526, "uuid": "8041c63f-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.179.64.34:58175/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935527, "uuid": "8093debd-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.115.9:38587/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935648, "uuid": "c8e53eac-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:48667/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c91c1edc-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.192.148:50854/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c9399985-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.38.149.164:49606/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c939a96c-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.45.64:39371/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c93d82ac-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.89.61:40934/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c9415674-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.235.221.127:13571/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c942f13b-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.176:52380/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c96df6e7-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.22.28:33448/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c987df45-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.178:34651/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935649, "uuid": "c98f6e48-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.76.224:41478/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935650, "uuid": "c997cd8a-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.107.93:46173/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935650, "uuid": "c99ce61c-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.143.42:59737/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935650, "uuid": "c9a51089-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.181.97:57500/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935650, "uuid": "c9a52257-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.228.159:46969/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935650, "uuid": "c9be0bf2-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.163.209.129:57233/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935668, "uuid": "d48f3782-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.96.63:40649/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "ed855b9f-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.174:37127/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "eda0ff7d-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.238.27.138:57400/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "edc00662-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:46462/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "edc7cd1d-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:46462/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "edd12ce8-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:43863/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "eddf6341-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.143.42:59737/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "ede14647-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.174:37127/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "ede69145-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.96.63:40649/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "ede72a59-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.69.22:49017/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935710, "uuid": "ede7366d-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.202:41914/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "edf50596-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.232.53.145:56344/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee167dd9-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.117:48090/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee1ef54a-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.88.171:45797/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee39d017-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.119.103:41883/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee41338e-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.66.41.204:37027/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee49338a-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.9.138:52636/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935711, "uuid": "ee567379-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.38.41:39008/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935721, "uuid": "f3fa6e21-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.55.46:34153/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935721, "uuid": "f4735a12-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.218.61:55702/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935730, "uuid": "f96f7f00-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.178.108:36745/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935734, "uuid": "fbbb07cb-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.157.96:47836/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935767, "uuid": "0fd68e73-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.210.86.124:54560/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935767, "uuid": "0fd7aea5-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.9.138:52636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935767, "uuid": "0fe11c86-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.142.234:37815/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935767, "uuid": "0fe28e66-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.88.171:45797/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "0fea42a4-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.88.231:46035/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "0fef2c2a-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.49.213.85:59688/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "0ff2845b-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.16:47733/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "1008c92f-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:43863/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "1044b1b7-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.176.250:46174/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "105f8fc4-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.36.232:59266/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935768, "uuid": "1062d3fd-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.84.219.118:37931/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935830, "uuid": "356fe3bd-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.235.221.127:13571/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935830, "uuid": "3570faab-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.107.93:46173/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935830, "uuid": "3571ea61-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.119.103:41883/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "357a5e1e-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.82.22:41069/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "357a91fe-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.178:34651/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "357a99f3-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.249.74:59110/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "357b7cdd-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.38.41:39008/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35896d9c-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.67.213.82:58805/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35896e36-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.178.108:36745/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35897f4b-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.87.130:56328/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35898586-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.181.97:57500/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "358bf4c0-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.157.96:47836/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35971fa9-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.44.149:55821/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35b0b166-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.213.32.135:52647/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35b50187-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.151.87:42843/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35ba0a66-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.254.101:41071/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35d5fc11-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.21.29.140:52069/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35ddc5e3-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.87.48:46568/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35e4394c-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.16.69:55306/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "35f3718a-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.97.192:48056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935831, "uuid": "3600907b-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.101.69:52257/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935832, "uuid": "36155200-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.69.16:47195/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935836, "uuid": "39075e30-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.159.221:35103/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935836, "uuid": "39089bdc-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.159.221:35103/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935844, "uuid": "3d78263d-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.198.180:33480/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935847, "uuid": "3f4d419d-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.198.180:33480/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935887, "uuid": "57332fb8-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.176.173:33151/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935887, "uuid": "57336a54-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.151.87:42843/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935887, "uuid": "5734b610-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.45.64:39371/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935887, "uuid": "5743484f-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.87.48:46568/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776935887, "uuid": "574ea610-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dsff5.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936083, "uuid": "cbf73842-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.226.192:39217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936088, "uuid": "cf38b38a-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.102:47368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936368, "uuid": "75d31e55-3ef6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0rt.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936439, "uuid": "9ffa02db-3ef6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.253:36633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936447, "uuid": "a513cc82-3ef6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.61.209.11:44161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936728, "uuid": "4c2f70f4-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.19.7:57745/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936789, "uuid": "7088c174-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynspirea2.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776936870, "uuid": "a0cc7621-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.233.2:60215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937027, "uuid": "fed04c55-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:58812/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937330, "uuid": "b36c29c6-3ef8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdk-focus.sasdherk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937478, "uuid": "0b825227-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.151.116.186:45418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937508, "uuid": "1d397f1b-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.65:6275/dat.bat", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937508, "uuid": "1d522d64-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.65:6275/kru.zip", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937509, "uuid": "1dfe184f-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plugins-costs-nyc-boulevard.trycloudflare.com/dat.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937509, "uuid": "1e10d254-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plugins-costs-nyc-boulevard.trycloudflare.com/kru.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937513, "uuid": "205df849-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plugins-costs-nyc-boulevard.trycloudflare.com/dat.wsf", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "plugins-costs-nyc-boulevard-trycloudflare-com", "colour": "#9afa7c", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937565, "uuid": "3f79222f-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.65:6275/dat.wsf", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937573, "uuid": "441d90e3-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.102:47368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776937750, "uuid": "adbcdeeb-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://80qqgwqb.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938166, "uuid": "a59f1d5f-3efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-3mbe.wertbash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938178, "uuid": "aced6d34-3efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.147.89:60389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938227, "uuid": "c9b400cc-3efa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.19.7:57745/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938527, "uuid": "7c7d7981-3efb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:58812/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938593, "uuid": "a406260a-3efb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norlineum5.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776938952, "uuid": "79c61a57-3efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.178:57235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776939066, "uuid": "be1882ed-3efc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mervale9al.qazsadf.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776939550, "uuid": "de685e6e-3efd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://capita-sla.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776939971, "uuid": "d9af68f7-3efe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ciphercas.sadfont.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940037, "uuid": "0079fa1a-3eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.180:43185/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940222, "uuid": "6ee49630-3eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.241.60:45323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940326, "uuid": "ad28fff3-3eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.172:41642/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940403, "uuid": "da97d8e6-3eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.178:57235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940447, "uuid": "f4e232a0-3eff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xwql.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940812, "uuid": "cef34c99-3f00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.36:60973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940932, "uuid": "167570da-3f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wi1d-array.rentcad.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776940939, "uuid": "1a532af6-3f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.36:60973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941187, "uuid": "ae0af6ea-3f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.52.93:33971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941226, "uuid": "c5b0653c-3f01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/ur0a.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941355, "uuid": "126d1455-3f02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jcgopydo.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941826, "uuid": "2b2f357a-3f03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.180:43185/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776941833, "uuid": "2effe89e-3f03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trans6-stream.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942126, "uuid": "de13b17b-3f03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.172:41642/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942194, "uuid": "065e8787-3f04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper8-signal.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942672, "uuid": "235f3a26-3f05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.52.93:33971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942733, "uuid": "47c1fb26-3f05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4cke-chain.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776942735, "uuid": "48c9d9d4-3f05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.126.208.140:55428/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943152, "uuid": "4193857b-3f06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snowbrand.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943176, "uuid": "4f79b78e-3f06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.10.192.9:55589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943570, "uuid": "3a59a66b-3f07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://faithf2-frame.2zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776943991, "uuid": "35810f34-3f08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://61ok.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776944123, "uuid": "84083f15-3f08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.224.118:39904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776944475, "uuid": "561bc378-3f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dusttide.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776944486, "uuid": "5caedcf8-3f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.76.158:33589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776944529, "uuid": "75ff842e-3f09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.126.208.140:55428/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776945018, "uuid": "999b9ef2-3f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reef-mark.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776945144, "uuid": "e4ac8936-3f0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.44.207:35002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776945438, "uuid": "93ada968-3f0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refinecivil.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776945735, "uuid": "44c0a8e8-3f0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.224.118:39904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776945918, "uuid": "b1ec3cf2-3f0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bangwdpy.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946275, "uuid": "86a02f69-3f0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zyddq.ra5ximor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946402, "uuid": "d26f55e1-3f0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.117.52:36698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776946747, "uuid": "a05146c0-3f0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ap-mesh.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776947233, "uuid": "c213bc94-3f0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://veltideen.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776947650, "uuid": "ba5f5a29-3f10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nbfirv.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776948067, "uuid": "b2f54ba3-3f11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://supsensor.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776948380, "uuid": "6dae3523-3f12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.44.207:35002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776948549, "uuid": "d22e9dca-3f12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://delstrea.sylov8en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776948729, "uuid": "3d6d3075-3f13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.59.122:32991/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776948734, "uuid": "40553acb-3f13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.113.98:38258/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776949327, "uuid": "a1d0af2c-3f14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.211.117.55:34313/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776949327, "uuid": "a1dfec0c-3f14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.113.98:38258/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776949926, "uuid": "074f574f-3f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.211.117.55:34313/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776949927, "uuid": "07a31415-3f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.211:58825/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776949927, "uuid": "07ba68b9-3f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.202:41914/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950303, "uuid": "e7f6b158-3f16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.155.237:56893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950527, "uuid": "6cfdb006-3f17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.194.141:35263/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950767, "uuid": "fc6dfd8f-3f17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.104.247:51399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950827, "uuid": "1fefdff6-3f18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.211:58825/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950827, "uuid": "201770b2-3f18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.66.241:42546/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776950828, "uuid": "20a559b1-3f18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vormark6um.to1varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776951029, "uuid": "985a496e-3f18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.121.212:49247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776951309, "uuid": "3f43c2d7-3f19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bpja3y.to1varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776951856, "uuid": "85707302-3f1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.155.237:56893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776951970, "uuid": "c96cb900-3f1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.227:39543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952094, "uuid": "1337ecab-3f1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.234:52155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952269, "uuid": "7b8bb628-3f1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.59.122:32991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952514, "uuid": "0d9dcf64-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.119.46:43984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952627, "uuid": "5116f899-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.112:54496/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952757, "uuid": "9e862c15-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.32.65.48:39960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952758, "uuid": "9ec6dec1-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.254.114:32853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776952759, "uuid": "9fd88d28-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.137:55900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776953887, "uuid": "40329e6a-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ravenworke.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776953972, "uuid": "72e03424-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.119.46:43984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954073, "uuid": "aee81f1c-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yeay.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954129, "uuid": "d0078225-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.112.121:36849/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954140, "uuid": "d6eeac4c-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.227:39543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954431, "uuid": "84212ef6-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.51.95:48581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954486, "uuid": "a51a6709-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guardtimb.kymle6rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954546, "uuid": "c8ca0dae-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.194:37385/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954547, "uuid": "c9114927-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.184.171/teste.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954547, "uuid": "c93f1f9e-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.184.171/um.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954557, "uuid": "cf4f39a4-3f20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.137:55900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776954847, "uuid": "7c127122-3f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://civi4-forge.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955027, "uuid": "e77c542e-3f21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.112.121:36849/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955273, "uuid": "7a3c3b8b-3f22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-r0ut.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955328, "uuid": "9ae9cbb6-3f22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.56.63:53872/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955572, "uuid": "2c53f2fb-3f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.205.126:36974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955748, "uuid": "9517367a-3f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9sy22gk.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955758, "uuid": "9ae18147-3f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:60925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955758, "uuid": "9aea4a8a-3f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.51.95:48581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776955927, "uuid": "fff9917c-3f23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.165.231:51859/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956048, "uuid": "48452a2c-3f24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bark8-grid.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956186, "uuid": "9a1cc861-3f24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.163:53660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956229, "uuid": "b3dc02f0-3f24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.211.251:53986/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956347, "uuid": "fa067c97-3f24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nordraex.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956480, "uuid": "494dff4b-3f25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.163:53660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956594, "uuid": "8d5ff1d7-3f25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.220.61:46488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956656, "uuid": "b246cc25-3f25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.220.61:46488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776956953, "uuid": "6357ce76-3f26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://42qq.po3vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957127, "uuid": "cb138414-3f26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.56.63:53872/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957378, "uuid": "60e91a41-3f27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:60925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957427, "uuid": "7dbddeca-3f27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.22:47698/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957548, "uuid": "c5e00bae-3f27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://27ny0.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957668, "uuid": "0da924e4-3f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compil0-spark.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957727, "uuid": "30af9274-3f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.234:52155/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957728, "uuid": "31809add-3f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.213.77:36206/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776957969, "uuid": "c13084cf-3f28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cryptocatal.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776958281, "uuid": "7b37ae95-3f29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.60.152:37787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776958328, "uuid": "96f7c337-3f29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.8.158:44824/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776958449, "uuid": "deea4f5a-3f29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pric3-flow.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776958753, "uuid": "942c078d-3f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://locallan.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776958929, "uuid": "fd3c2987-3f2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.57.49.212:43134/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959060, "uuid": "4b6f36e5-3f2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.177.77:54725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959111, "uuid": "69837fcb-3f2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://segpaylo.de4xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959227, "uuid": "aeb512df-3f2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.165.231:51859/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959475, "uuid": "426fe5df-3f2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.43:49679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959710, "uuid": "ce809c2e-3f2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glmu.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959826, "uuid": "1404f7ef-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.211.251:53986/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776959827, "uuid": "146bbbe5-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.213.77:36206/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960019, "uuid": "86cde60c-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.197.218:46905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960067, "uuid": "a36115b5-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gsfyi.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960310, "uuid": "343af4e9-3f2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fkcrc.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960380, "uuid": "5dddd47c-3f2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.184.166:60241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960726, "uuid": "2c770651-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.8.158:44824/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960728, "uuid": "2d8deb70-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.59:54132/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960729, "uuid": "2e097636-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1inic-crest.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960738, "uuid": "33ae34fb-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:46892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776960739, "uuid": "33f87170-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.43:49679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961027, "uuid": "e007c2f7-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.43:46652/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961159, "uuid": "2e322213-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "4f45e31d-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961214, "uuid": "4f4600ab-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "6fc6b81c-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://o999.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "70085d64-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "700879d8-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "700cfc71-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "700cffc9-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961269, "uuid": "7014429d-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961337, "uuid": "98ca8b3d-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:46892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961451, "uuid": "dc361b60-3f30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ttgfvj.bovla7xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776961630, "uuid": "46ff66e4-3f31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.59:54132/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962110, "uuid": "65313938-3f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenmarka.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962177, "uuid": "8d6094b5-3f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.120.177:52038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962239, "uuid": "b24aa436-3f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.184.166:60241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962287, "uuid": "ced09b65-3f32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shapeprivat.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962523, "uuid": "5bb3861e-3f33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.234:45513/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962661, "uuid": "ad677b03-3f33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.63.30.182:44688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962772, "uuid": "efc522a5-3f33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fujyh.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776962964, "uuid": "622b73b5-3f34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.4:35727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963073, "uuid": "a355c42a-3f34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://modelfabri.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963628, "uuid": "ee01ea38-3f35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.80.163:43265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963731, "uuid": "2b82c39a-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.245.208.50/Psd8eZaW/Plugins/cred.dll", "Tag": [ { "name": "135e7b", "colour": "#e3a696", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963731, "uuid": "2b92facc-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.34.203:60409/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963735, "uuid": "2e14192e-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xj15ti.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963789, "uuid": "4dec2095-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.245.208.50/Psd8eZaW/Plugins/cred64.dll", "Tag": [ { "name": "135e7b", "colour": "#e3a696", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963790, "uuid": "4ec1d582-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.72.197.50:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=GENERAL&c=&c=GENERAL&c=&c=&c=&c=&c=", "Tag": [ { "name": "135e7b", "colour": "#e3a696", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963916, "uuid": "998c2b6a-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g1yph5-switch.qi2mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776963982, "uuid": "c0c74109-3f36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.120.177:52038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964160, "uuid": "2af0c742-3f37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.80.163:43265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964160, "uuid": "2b508732-3f37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.152.125:47367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964333, "uuid": "92656543-3f37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://timberexpose.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776964932, "uuid": "f75762ea-3f38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://roughcomp.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965473, "uuid": "39dff5ca-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://w90084qc.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965594, "uuid": "81abe4b5-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://30jp.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965603, "uuid": "8784f0e8-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.173.23:54764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776965604, "uuid": "87e8da9a-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.253.77:51274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966141, "uuid": "c7ff8f74-3f3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.60.192:52623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966194, "uuid": "e74a1943-3f3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kionap.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966262, "uuid": "0fcbb46a-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.60.192:52623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966428, "uuid": "72d01c2b-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.124:48154/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966428, "uuid": "72f493c7-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.249.112.213:46376/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966609, "uuid": "defad658-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flee-bridge.zom8lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776966853, "uuid": "7070a547-3f3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://epyc.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967213, "uuid": "46d517a3-3f3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ca1rn-mount.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967627, "uuid": "3dd2cf11-3f3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.249.112.213:46376/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967633, "uuid": "411a8e94-3f3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlinea8.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776967993, "uuid": "17a2e068-3f40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solline1ix.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776968063, "uuid": "41b2451d-3f40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.183.204:46031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776968709, "uuid": "c24ca91a-3f41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shallo-layer.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776969188, "uuid": "e00c226b-3f42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mercore1et.rainbow7ain.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776969727, "uuid": "2145e1a8-3f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundldaw.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776969728, "uuid": "21fbbd86-3f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.114.178.6:49907/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776969971, "uuid": "b2a4e445-3f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-r3bat.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970098, "uuid": "feaea9a3-3f44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.35.50.185:59827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970182, "uuid": "30cdd0dc-3f45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.21.226:58013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970331, "uuid": "89400114-3f45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://html.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970687, "uuid": "5db72689-3f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velnexor3.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970760, "uuid": "894e5c85-3f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.35.50.185:59827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970760, "uuid": "8952d707-3f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.128.38:34555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776970927, "uuid": "eca831a1-3f46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.149.59:42663/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971049, "uuid": "352153f2-3f47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://airwayequity.dark-hypnosis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971234, "uuid": "a3ae685b-3f47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.148.47:58213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971349, "uuid": "e7fb7c93-3f47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1sdw0.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971526, "uuid": "51cfa7bc-3f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.114.178.6:49907/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971596, "uuid": "7b47706a-3f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971711, "uuid": "bfdfd99c-3f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nugr.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971717, "uuid": "c3ab8c82-3f48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.21.226:58013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971827, "uuid": "04f35c72-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.227.62:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971827, "uuid": "04f5ac76-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.149.59:42663/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "08268f4a-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/lol.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "084ee57f-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "084ef15c-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971832, "uuid": "084ef979-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "0856c97d-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "085878e8-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "0858839a-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "085d7ee3-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776971833, "uuid": "0862c8cf-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972020, "uuid": "77c8c94d-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.148.47:58213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972067, "uuid": "944a02fb-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0mpu7-phase.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972078, "uuid": "9a928d83-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.255.207:35919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972203, "uuid": "e4feb742-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.180.69:39905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972247, "uuid": "ff696b0a-3f49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.255.207:35919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972325, "uuid": "2dd4277f-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.141:59756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972366, "uuid": "4689205e-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pb3kwq.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972427, "uuid": "6a866005-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.24:52659/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972669, "uuid": "fb348a88-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://parcelpow.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972728, "uuid": "1e348217-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.146.39:46312/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972796, "uuid": "466bc72d-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166//arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776972920, "uuid": "907fb14a-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.237:47306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973036, "uuid": "d5ab1e67-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.16:47733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973088, "uuid": "f4774268-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://primeree.obli8edanger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973158, "uuid": "1e95547e-3f4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.218.57.214:60999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973389, "uuid": "a7f12545-3f4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-lineet.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973752, "uuid": "8068695f-3f4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunarorganize.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973927, "uuid": "e87c51ac-3f4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.146.39:46312/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776973988, "uuid": "0d50ff49-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yt3oufng.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974116, "uuid": "597d28dc-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.237:47306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974117, "uuid": "59babdc9-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.180.69:39905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974228, "uuid": "9c396e46-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.24:52659/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974229, "uuid": "9c8dd53b-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.255.119:34288/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974347, "uuid": "e35321bc-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quormark6os.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974709, "uuid": "bacc9096-3f4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://partne0-sync.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776974951, "uuid": "4ad08a67-3f50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.21.247:42251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975011, "uuid": "6ef02df0-3f50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-draon.polyate-eye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975079, "uuid": "97a50ae2-3f50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.210.205:46801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975438, "uuid": "6d89d5cd-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975494, "uuid": "8eef3ac5-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "909a124a-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "909ce788-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "90a99311-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "90a9b8dd-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "90acfc09-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975497, "uuid": "90c9fd98-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "92f2a202-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "931ca772-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "932b54b4-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "932df4de-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "93314d31-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "93339e9f-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "9333c425-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "933639fe-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975501, "uuid": "93377194-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "933b4efe-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "933c21b0-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "9342d24e-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "93434a74-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "934b4f62-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975502, "uuid": "934ba61e-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/LjEZs/uYtea.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975554, "uuid": "b2801135-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975624, "uuid": "dc5c89fb-3f51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.118/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975731, "uuid": "1c3a3bf4-3f52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.230.52:51007/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975733, "uuid": "1d200405-3f52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r4il2-point.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776975971, "uuid": "ab4e5d8d-3f52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.255.119:34288/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976053, "uuid": "dbb8597b-3f52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xjnorrmf.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976157, "uuid": "19e01c2f-3f53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.39:36333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976278, "uuid": "61c9a72b-3f53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.33:54761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976389, "uuid": "a40e2d5f-3f53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-r3fin.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976634, "uuid": "363dc521-3f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.39:36333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976750, "uuid": "7b901cc3-3f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.123.111:41367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776976812, "uuid": "a0502bc6-3f54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abl3zv.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977109, "uuid": "511c592d-3f55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-rn0du.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977359, "uuid": "e6330c88-3f55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.255:59261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977419, "uuid": "0a1abe66-3f56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.37.19.74:34549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977473, "uuid": "2a647c9c-3f56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lmk4z.through7esid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977478, "uuid": "2d93f5c6-3f56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.119:59280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977828, "uuid": "fdabcfef-3f56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.230.52:32911/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776977828, "uuid": "fdbeb52c-3f56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yxex4i.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978131, "uuid": "b29db143-3f57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talspirea9.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978198, "uuid": "da98fe7a-3f57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:32935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978427, "uuid": "62a93d69-3f58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.230.52:32911/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978487, "uuid": "867be4ca-3f58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bircmed.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978848, "uuid": "5e0f33fe-3f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pqj8j.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776978849, "uuid": "5e949e3d-3f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.119:59280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776979026, "uuid": "c837f982-3f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.230.52:51007/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776979027, "uuid": "c865e585-3f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.70.159:41876/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776979089, "uuid": "edade0cd-3f59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://directspring.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776979449, "uuid": "c4642a20-3f5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rail-trace.alexand-trouble.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776979628, "uuid": "2ecdea58-3f5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.178.6.212:59251/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980111, "uuid": "4e71a9df-3f5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-tideex.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980227, "uuid": "93f53689-3f5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.230:33112/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980414, "uuid": "0332a47a-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6sfy.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980478, "uuid": "2983ae84-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.38.16:50794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980766, "uuid": "d4f1311f-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jz39wex.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980828, "uuid": "fa034e5b-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.146:58389/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980828, "uuid": "fa14eab6-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.178.6.212:59251/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980831, "uuid": "fbd8d25d-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.144.166:53224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980889, "uuid": "1e636fe1-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/w.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980945, "uuid": "3f8e0abd-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/m68k", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980945, "uuid": "3f94b4e1-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/i686", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980945, "uuid": "3f96b24a-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/busybox.arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980945, "uuid": "3facfee2-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.57.241.166/arm64", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980959, "uuid": "484fe6ef-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.29.68/toot", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776980960, "uuid": "48824bbf-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.228/bins.sh", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981067, "uuid": "888afa39-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gxbpjafl.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981137, "uuid": "b263f870-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.146.77:60722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "f9f0d59f-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981257, "uuid": "fa00c0dd-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "fbd0844e-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981260, "uuid": "fbd4184c-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbdc35a3-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbded43d-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbe4a990-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbe6b284-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbece077-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbecfeb4-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981261, "uuid": "fbf64b89-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.163/concakhbtandhuy.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981263, "uuid": "fd48f2a5-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981269, "uuid": "00f60653-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981269, "uuid": "0106b40c-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981269, "uuid": "011dee07-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981269, "uuid": "01325e8f-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981270, "uuid": "01ae6196-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981271, "uuid": "020948cf-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981271, "uuid": "0220eba5-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981272, "uuid": "02cbf500-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981272, "uuid": "02dd9dde-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981272, "uuid": "02f1c90e-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.233.125/concakhbtandhuy.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981381, "uuid": "438046c5-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.46.134:45942/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981382, "uuid": "44635b94-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.201.140.48:57513/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981385, "uuid": "45d36e67-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.155.219:44573/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981391, "uuid": "49afbe2b-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.135.172.29:59275/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981393, "uuid": "4add43b3-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.233.182:40593/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981428, "uuid": "5f667f6a-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-drais.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981435, "uuid": "63faad21-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/d", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981620, "uuid": "d2016838-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.104.247:50167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981727, "uuid": "1222aa0c-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.230:33112/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981728, "uuid": "1241e6f0-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.128.124:44016/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981732, "uuid": "14c5df01-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelvaleum.boatdi1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776981977, "uuid": "a6e2b7a9-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.147.100.200:44721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982033, "uuid": "c8911aa7-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.152.125:47367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982087, "uuid": "e848320d-3f60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://azqr2vav.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982220, "uuid": "3806f6c9-3f61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auzhpjmyaqayopaqidmc.supabase.co/storage/v1/object/public/p/i.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982386, "uuid": "9ac742f3-3f61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://autumnpul.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982462, "uuid": "c83e8507-3f61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auzhpjmyaqayopaqidmc.supabase.co/storage/v1/object/public/p/vc", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982514, "uuid": "e6b38272-3f61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.144.166:53224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982570, "uuid": "08499d1b-3f62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.146:58389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776982927, "uuid": "dcfa1cb4-3f62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.128.124:44016/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776983049, "uuid": "25c7a7d7-3f63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oqjwoky.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776983170, "uuid": "6e13c7fa-3f63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.210.84:59864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776983347, "uuid": "d7c76afc-3f63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mixwoo.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776983709, "uuid": "af3915bd-3f64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valeanc.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984013, "uuid": "64673b32-3f65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xzkgjdst.capriccio-nephew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984312, "uuid": "168cc41d-3f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://supply-basi.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984428, "uuid": "5b9227be-3f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.96.32:32873/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984676, "uuid": "efd888cd-3f66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://525x6rn.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984742, "uuid": "16dcde6a-3f67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:46484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984743, "uuid": "17c1d801-3f67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.252.244:52343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776984973, "uuid": "a0d23e74-3f67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-draa.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776985221, "uuid": "3494a0ca-3f68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.30.175:54648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776985286, "uuid": "5b185bfb-3f68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.178.153:52910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776985693, "uuid": "4e10b004-3f69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mercrestos.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776985700, "uuid": "523f1c5f-3f69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.226.141:59733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776985872, "uuid": "b8a92e89-3f69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ciphermolecu.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986244, "uuid": "965118d6-3f6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.245.48:49192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986359, "uuid": "da81867e-3f6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.245.48:49192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986416, "uuid": "fc85e408-3f6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://du5t-port.plantpo1luter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986528, "uuid": "3f9e6ad1-3f6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.152.115:50098/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986654, "uuid": "8ab21a38-3f6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://manifes-daw.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986843, "uuid": "fb654b8c-3f6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.178.153:52910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776986964, "uuid": "43385d86-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.185.235:56452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987021, "uuid": "658766b2-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.30.175:54648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987127, "uuid": "a4d89df3-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.152.115:50098/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987141, "uuid": "acef88b5-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.252.244:52343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987190, "uuid": "c9cf9b1e-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ev8l.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776987674, "uuid": "ea94610e-3f6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fore0-core.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776988215, "uuid": "2ccd11ff-3f6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdsa.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776988752, "uuid": "6d5210a9-3f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.185.235:56452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776988754, "uuid": "6e14df42-3f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ancien0-path.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776936425, "uuid": "979912a3-3ef6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.61.209.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776984725, "uuid": "0c8f67d9-3f67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.252.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913445, "uuid": "1666a2be-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.207.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaab3121-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.66.41.204", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921907, "uuid": "ca2feaba-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.109.100.133", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981365, "uuid": "39ebcee5-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.46.134", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980885, "uuid": "1c049ddd-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.77.246.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776934506, "uuid": "1fe84401-3ef2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.181.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916925, "uuid": "30e99a6d-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.45.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903905, "uuid": "e08e7d64-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.33.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963728, "uuid": "29661d0c-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.34.203", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a6a41d-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.96.63", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776958924, "uuid": "fa5428ff-3f2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.57.49.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965585, "uuid": "7cb30a49-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.253.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776936845, "uuid": "92018e42-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.127.233.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318991e0-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.220.69.16", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaa97cc2-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.178.108", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaa98bb5-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.157.96", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776933424, "uuid": "9b38f314-3eef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.175.223", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776970145, "uuid": "1a4cecda-3f45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.21.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924245, "uuid": "3bed850e-3eda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.249.123.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935764, "uuid": "0df454c5-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.84.219.118", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c69cb723-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.98.97.178", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c69ed79a-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.235.221.127", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776979025, "uuid": "c719b173-3f59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.70.159", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920824, "uuid": "45004068-3ed2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.69.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972425, "uuid": "693e55bc-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.31.24", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954545, "uuid": "c7f5a046-3f20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.148.194", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776940028, "uuid": "fb15688d-3efe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.149.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956226, "uuid": "b232d6e5-3f24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.211.251", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931384, "uuid": "db5b6bea-3eea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.66.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318bb897-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.16.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921725, "uuid": "5deae24c-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.194.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946385, "uuid": "c83b1e74-3f0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.117.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925985, "uuid": "48e3c99f-3ede-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.173.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980824, "uuid": "f7f02ddb-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.247.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954126, "uuid": "ce228fe6-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.112.121", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776948725, "uuid": "3b6fbaae-3f13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.59.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971224, "uuid": "9dea9033-3f47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.148.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776985265, "uuid": "4eec4c65-3f68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.178.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776940806, "uuid": "caf2a875-3f00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.145.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaa82be7-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.88.171", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "20f786a7-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.183.5", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "31989e24-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.97.192", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c69cfb82-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.163.209.129", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776958325, "uuid": "95655255-3f29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.8.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935106, "uuid": "85538e01-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.166.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964146, "uuid": "22aa82de-3f37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.152.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980225, "uuid": "92600fde-3f5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.47.230", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaaab2f5-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.131.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972064, "uuid": "925c461e-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.255.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a1f920-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.232.228.159", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776955925, "uuid": "fe93d814-3f23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.165.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776918665, "uuid": "3e3bdac4-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.148.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961024, "uuid": "de27b9e9-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.221.43", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776934144, "uuid": "483f41ca-3ef1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.226.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972185, "uuid": "da982050-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.72.180.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776911585, "uuid": "c1f180b7-3ebc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.164.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935764, "uuid": "0df4cb97-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.36.232", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942725, "uuid": "42c60e5b-3f05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.126.208.140", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776907924, "uuid": "3bbff500-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.25.188.237", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a70e7e-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.107.93", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776951964, "uuid": "c5a143dd-3f1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.225.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975728, "uuid": "1a6e7b2f-3f52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.230.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972725, "uuid": "1c5452b1-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.146.39", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925265, "uuid": "9be7b3b5-3edc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.249.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776945125, "uuid": "d942f987-3f0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.44.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776977465, "uuid": "25a95a94-3f56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.48.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954424, "uuid": "804b0ae6-3f20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.51.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966124, "uuid": "bde09bd9-3f3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.60.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980463, "uuid": "20cca036-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.38.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921854, "uuid": "ab0c5f75-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.98.94", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931925, "uuid": "1d907808-3eec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.41.153.146", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903064, "uuid": "eb4f5c40-3ea8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.0.69.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913085, "uuid": "3fdf67bc-3ec0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.242.5.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966425, "uuid": "71615b70-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.249.112.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937506, "uuid": "1bf8c6a4-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.65", "Tag": [ { "name": "158-94-210-65-6275", "colour": "#f253d4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963728, "uuid": "29662646-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.245.208.50", "Tag": [ { "name": "135e7b", "colour": "#e3a696", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921847, "uuid": "a699ec57-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.222.254.210", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981365, "uuid": "39ebf1f9-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.233.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318ba9ba-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.159.221", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903726, "uuid": "7565b807-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.182.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776955564, "uuid": "27b39835-3f23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.205.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935764, "uuid": "0df4c7eb-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.176.250", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "20e60c02-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.128.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776952745, "uuid": "971adde5-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961145, "uuid": "26491472-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776933185, "uuid": "0cc028f6-3eef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.227.156.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776986945, "uuid": "381d92b5-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.185.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916925, "uuid": "30e99811-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.211.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776944105, "uuid": "79a7b1d0-3f08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.224.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776948725, "uuid": "3b6f718c-3f13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.113.98", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956165, "uuid": "8e0eae0f-3f24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.69.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960724, "uuid": "2b662c52-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.228.59", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776915724, "uuid": "6530f938-3ec6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.249.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935524, "uuid": "7f05ee63-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.115.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c69e0212-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.181.97", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776932345, "uuid": "180367d1-3eed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.214.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776985684, "uuid": "48b49ce7-3f69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.226.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776951007, "uuid": "8b940ca8-3f18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.121.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776952506, "uuid": "08f1130a-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.119.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776986226, "uuid": "8b8d5355-3f6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.245.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776915184, "uuid": "23457b90-3ec5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.84.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919325, "uuid": "c776f3d5-3ece-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.162.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913925, "uuid": "349895f6-3ec2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.177.201", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919925, "uuid": "2d53efbb-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.36.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "3187cf87-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.198.180", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937445, "uuid": "f7dd125a-3ef8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.151.116.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776970085, "uuid": "f68274c5-3f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.35.50.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971345, "uuid": "e5b264b8-3f47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1sdw0.obli8edanger.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971583, "uuid": "73b6674c-3f48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.57.241.166", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920405, "uuid": "4b04dea6-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.30.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981365, "uuid": "39ebbe7c-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.135.172.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963785, "uuid": "4bda188c-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.72.197.50", "Tag": [ { "name": "135e7b", "colour": "#e3a696", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776929224, "uuid": "d38478b5-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.133.136", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954545, "uuid": "c7f565aa-3f20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.245.184.171", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935764, "uuid": "0df4b6d2-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.210.86.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaabc3a3-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.29.9.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962645, "uuid": "a3f733e0-3f33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.63.30.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935106, "uuid": "85536146-3ef3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.72.35.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776986525, "uuid": "3dfe3a1f-3f6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.152.115", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776933125, "uuid": "e8eb5390-3eee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.28.83", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776952085, "uuid": "0da65a4e-3f1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.211.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318abf04-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.101.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776910144, "uuid": "674b6ef6-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.153.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966425, "uuid": "7160d498-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.21.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318889a9-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.192.254.101", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776930725, "uuid": "526985ed-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.66.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776950285, "uuid": "dcee65e1-3f16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.155.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923645, "uuid": "d64bf81f-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.10.192.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaab8c37-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.38.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a14e8c-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.143.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924125, "uuid": "f4644d6f-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.15.51", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776936724, "uuid": "4a4e0d45-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.19.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981365, "uuid": "39ec00c9-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.229.155.219", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776952625, "uuid": "4fb65228-3f1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776933245, "uuid": "305cb3a4-3eef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.146.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776906424, "uuid": "bdb165d2-3eb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.26.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920166, "uuid": "bc7a632b-3ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.95.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a88d85-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.76.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960006, "uuid": "7f193f78-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.197.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776917285, "uuid": "0736ac42-3eca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.117.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776926824, "uuid": "3d3fdc5a-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.82.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776944465, "uuid": "50040f04-3f09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.76.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921907, "uuid": "ca2f5681-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.140.244.57", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935764, "uuid": "0df4c14c-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.142.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776918125, "uuid": "fbf61e9a-3ecb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.36.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "31925d84-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.21.29.140", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928684, "uuid": "920c01de-3ee4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "277lk6.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776957545, "uuid": "c453ffdf-3f27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27ny0.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965591, "uuid": "7ff24f7e-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "30jp.zom8lirex.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776908825, "uuid": "54cf0ca8-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.96.54", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c69dd75d-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.89.61", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "318cf21e-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.151.87", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935645, "uuid": "c6a3959b-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.22.28", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776934085, "uuid": "24d2be6b-3ef1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.147.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaa99a88-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.119.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935824, "uuid": "31967138-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.87.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "20ec5ecc-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776940205, "uuid": "651fd913-3eff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.241.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776957725, "uuid": "2fc11fa2-3f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.213.77", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928206, "uuid": "74c84b9c-3ee3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.44.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776974225, "uuid": "9a779773-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.255.119", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776908584, "uuid": "c57cf4d0-3eb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.204.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922326, "uuid": "c3e09f6a-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.57.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776911225, "uuid": "ebafd3b7-3ebb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.82.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776959045, "uuid": "4273be9c-3f2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.177.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919325, "uuid": "c7773577-3ece-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.252.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776907025, "uuid": "24173406-3eb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.64.176", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925745, "uuid": "b9d6dca0-3edd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.139.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960365, "uuid": "5541ce1b-3f2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.184.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956945, "uuid": "5ebc1ade-3f26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42qq.po3vaxel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975485, "uuid": "896e064f-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.131.108.107", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975426, "uuid": "664bebeb-3f51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.193.118", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921847, "uuid": "a696f5cb-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.91", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927906, "uuid": "c1e17ada-3ee2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4sset3-node.qazsadf.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776985206, "uuid": "2b8e6c20-3f68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.42.30.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776984670, "uuid": "ec1e50e2-3f66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "525x6rn.plantpo1luter.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909365, "uuid": "9696f715-3eb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946745, "uuid": "9f1161a8-3f0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ap-mesh.sylov8en.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935705, "uuid": "eaabff1a-3ef4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.218.61", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963606, "uuid": "e1114018-3f35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.80.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962165, "uuid": "85daadbd-3f32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.212.120.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956584, "uuid": "87c37c6a-3f25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.220.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981725, "uuid": "10d1c97d-3f60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.128.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776933724, "uuid": "4e2d3813-3ef0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.179.64.34", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931264, "uuid": "93d4a8ba-3eea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.72.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943987, "uuid": "32dce989-3f08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61ok.ra5ximor.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921907, "uuid": "ca354aa8-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.203", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#9c8503", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981244, "uuid": "f1dea9bb-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "68.183.233.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921907, "uuid": "ca3448aa-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "69.10.36.54", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776979624, "uuid": "2caa1d52-3f5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "69.178.6.212", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980411, "uuid": "015e6d12-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6sfy.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776926771, "uuid": "1d55a0d0-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "753s.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937745, "uuid": "aa909a64-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "80qqgwqb.wertbash.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776969724, "uuid": "1fd5be7d-3f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.114.178.6", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776955325, "uuid": "98eed61a-3f22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.84.56.63", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980944, "uuid": "3f4c29b2-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.106.228", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776955745, "uuid": "93828753-3f23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9sy22gk.po3vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976806, "uuid": "9d003062-3f54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abl3zv.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971045, "uuid": "32cd8a53-3f47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "airwayequity.dark-hypnosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776969969, "uuid": "b18ea185-3f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-r3bat.dark-hypnosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922745, "uuid": "be26d234-3ed6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ambe1-point.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776988750, "uuid": "6c36c238-3f70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ancien0-path.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776930606, "uuid": "0b749758-3ee9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkdraa6.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982384, "uuid": "999886c9-3f61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "autumnpul.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982210, "uuid": "31d5482b-3f61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auzhpjmyaqayopaqidmc.supabase.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776982085, "uuid": "e732dd8d-3f60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "azqr2vav.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776945851, "uuid": "89def8cb-3f0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bangwdpy.ra5ximor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956045, "uuid": "46061dd7-3f24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bark8-grid.po3vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776910684, "uuid": "a9246a57-3eba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "baum-1s.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776911765, "uuid": "2d724d38-3ebd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berg-5.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776918907, "uuid": "ce1b48cd-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berg-8.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776904750, "uuid": "d812493d-3eac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berg-9z.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776978485, "uuid": "853e6581-3f58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bircmed.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913449, "uuid": "18d57254-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-1p.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919265, "uuid": "a3eff232-3ece-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-2.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776908406, "uuid": "5b59b6e9-3eb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-5.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776907085, "uuid": "47cd2bcf-3eb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-6.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776917706, "uuid": "0286d9ee-3ecb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-7.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776951308, "uuid": "3effd549-3f19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bpja3y.to1varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925212, "uuid": "7c4873fb-3edc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bui73.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776969725, "uuid": "1fe106d5-3f44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundldaw.dark-hypnosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972064, "uuid": "92619abf-3f49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0mpu7-phase.obli8edanger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960727, "uuid": "2caecbf0-3f2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1inic-crest.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967209, "uuid": "4471f55f-3f3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ca1rn-mount.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776939548, "uuid": "dd3421cd-3efd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "capita-sla.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776939968, "uuid": "d77ec058-3efe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ciphercas.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776985865, "uuid": "b446c955-3f69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ciphermolecu.plantpo1luter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954844, "uuid": "7a1cf1ec-3f21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "civi4-forge.po3vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776957665, "uuid": "0c076ae6-3f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compil0-spark.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921253, "uuid": "44586549-3ed3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crawleramp.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776957965, "uuid": "be9115cd-3f28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryptocatal.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776911107, "uuid": "a4e993fb-3ebb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-7.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776948545, "uuid": "cffaf748-3f12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "delstrea.sylov8en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921852, "uuid": "a9e78c27-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "desktop-version.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776979087, "uuid": "ec396f83-3f59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "directspring.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776935826, "uuid": "32f2728d-3ef5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dsff5.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776986412, "uuid": "fa9a3743-3f6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "du5t-port.plantpo1luter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776944469, "uuid": "5281b953-3f09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dusttide.ra5ximor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776936786, "uuid": "6f3bd6b3-3ef7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynspirea2.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923412, "uuid": "4b9fa59e-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ejm0c.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776921672, "uuid": "3e2389dc-3ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "encod-logic.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966851, "uuid": "6edb447d-3f3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "epyc.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776987188, "uuid": "c8a77957-3f6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ev8l.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943566, "uuid": "3826d371-3f07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "faithf2-frame.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909064, "uuid": "e38fce9f-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-1.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913085, "uuid": "3fe7e785-3ec0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-3.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920350, "uuid": "2a46facc-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-9.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776908045, "uuid": "83df1290-3eb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fire-2m.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960306, "uuid": "32073043-3f2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fkcrc.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966607, "uuid": "ddc033d8-3f3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flee-bridge.zom8lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776987671, "uuid": "e8d0d795-3f6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fore0-core.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962765, "uuid": "ebae2b14-3f33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fujyh.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963913, "uuid": "97d789fd-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g1yph5-switch.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776930187, "uuid": "11f72fb6-3ee8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gdvdjt.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776906786, "uuid": "95bdc98f-3eb1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geld-x5.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776938164, "uuid": "a45579c0-3efa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-3mbe.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776959707, "uuid": "ccf33eaa-3f2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glmu.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776918965, "uuid": "f0ae700a-3ecd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-4z.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776904084, "uuid": "4b1abc2d-3eab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-5b.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925871, "uuid": "04dfa947-3ede-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr0vvt1-port.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776930185, "uuid": "10b55987-3ee8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gran-sync.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776960006, "uuid": "7f27856e-3f2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gsfyi.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954484, "uuid": "a3dd277b-3f20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guardtimb.kymle6rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981065, "uuid": "873ed9c1-3f5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gxbpjafl.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909845, "uuid": "b4ac8e03-3eb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-4.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920830, "uuid": "483ea97e-3ed2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-5.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "2118cd1c-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "himachaly17aplr.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "2113760e-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "htlwub00k.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776970329, "uuid": "88110fa6-3f45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "html.dark-hypnosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931024, "uuid": "04d6ff3d-3eea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyp3-plate.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976386, "uuid": "a25bb57e-3f53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-r3fin.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942191, "uuid": "047a613f-3f04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper8-signal.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776912065, "uuid": "dfd530f1-3ebd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-8v.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941351, "uuid": "0fa8a13f-3f02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jcgopydo.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980763, "uuid": "d38db998-3f5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jz39wex.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916207, "uuid": "84bb03ff-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-6.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981727, "uuid": "121b583f-3f60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelvaleum.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776966191, "uuid": "e5bd47e4-3f3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kionap.zom8lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776905765, "uuid": "35497f91-3eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-2.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776913809, "uuid": "ef8ce28d-3ec1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-9.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923950, "uuid": "8c4933a6-3ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ljzoiu.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776977465, "uuid": "25b1ac88-3f56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lmk4z.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776958745, "uuid": "8f829842-3f2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "locallan.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776973750, "uuid": "7f1b3d43-3f4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunarorganize.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931810, "uuid": "d91c1e58-3eeb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "majorbright.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776986651, "uuid": "8910dd49-3f6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "manifes-daw.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776969184, "uuid": "ddbc1b88-3f42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mercore1et.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776985684, "uuid": "48be6f36-3f69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mercrestos.plantpo1luter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776939064, "uuid": "bccddb9f-3efc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mervale9al.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776977106, "uuid": "4f94a2a1-3f55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-rn0du.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "210e3a40-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "missusecapmrch.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776983345, "uuid": "d6765408-3f63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mixwoo.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963071, "uuid": "a1fb9a69-3f34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "modelfabri.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776919630, "uuid": "7d446873-3ecf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mond-1v.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776908765, "uuid": "30ef6995-3eb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mond-q7.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776914227, "uuid": "e89117c7-3ec2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moon-5z.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "2111cbdd-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nadcapfeb25-26.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776947645, "uuid": "b781070c-3f10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nbfirv.sylov8en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776955271, "uuid": "78d71b79-3f22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-r0ut.po3vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776912425, "uuid": "b685ede1-3ebe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-2.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916985, "uuid": "54b864ad-3ec9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-5.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776905407, "uuid": "5f793769-3eae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-s6.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776909665, "uuid": "49b84961-3eb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-x8.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776956344, "uuid": "f8b9e858-3f24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nordraex.po3vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776938587, "uuid": "a055af4a-3efb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norlineum5.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776929048, "uuid": "6ae18a8c-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "north9-line.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928265, "uuid": "97f558e6-3ee3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "notifieropti.sadfont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776971706, "uuid": "bce85dc1-3f48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nugr.obli8edanger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961266, "uuid": "6dfe212f-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "o999.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776905045, "uuid": "87c7f98c-3ead-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-4.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776983045, "uuid": "234fcc22-3f63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oqjwoky.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776936364, "uuid": "735f478d-3ef6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0rt.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972665, "uuid": "f8beda97-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "parcelpow.obli8edanger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776974706, "uuid": "b90cc1f2-3f4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "partne0-sync.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776928924, "uuid": "2112ca90-3ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "paypal.auth-sharefile.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776972365, "uuid": "457067f7-3f4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pb3kwq.obli8edanger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776932646, "uuid": "cb363a41-3eed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pds6zjwn.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776932165, "uuid": "ac88f50c-3eec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-lab.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776918064, "uuid": "d7f9ca10-3ecb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-3k.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776911346, "uuid": "33572b93-3ebc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-3z.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776907385, "uuid": "fae06c7d-3eb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-y1.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937508, "uuid": "1d44f1e6-3ef9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plugins-costs-nyc-boulevard.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922450, "uuid": "0e4aebc4-3ed6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "port-dat.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776978846, "uuid": "5c8daaf5-3f59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pqj8j.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776958445, "uuid": "dc8abd9f-3f29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pric3-flow.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776973084, "uuid": "f2909ed7-3f4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "primeree.obli8edanger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776922031, "uuid": "1426bbbe-3ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulspost.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927547, "uuid": "ebe41cb0-3ee1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu1ck-flow.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776974345, "uuid": "e1c255f8-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quormark6os.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975728, "uuid": "1a784074-3f52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r4il2-point.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776979446, "uuid": "c2933740-3f5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rail-trace.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776953885, "uuid": "3e8f7d99-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ravenworke.kymle6rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776945011, "uuid": "95a13b3e-3f0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reef-mark.ra5ximor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776945427, "uuid": "8da7a97c-3f0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "refinecivil.ra5ximor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776904444, "uuid": "219dfc1a-3eac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-1.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776914887, "uuid": "72329487-3ec4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-3.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964930, "uuid": "f60d85ce-3f38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "roughcomp.zom8lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776937325, "uuid": "b0393d6d-3ef8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdk-focus.sasdherk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776988212, "uuid": "2b12cfa9-3f6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdsa.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776959107, "uuid": "67483738-3f2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "segpaylo.de4xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967630, "uuid": "3f849216-3f3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlinea8.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776968706, "uuid": "c0e89c94-3f41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shallo-layer.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962285, "uuid": "cd8b58e0-3f32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shapeprivat.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776943150, "uuid": "40260f48-3f06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snowbrand.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924731, "uuid": "5de18cab-3edb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "so1id-sheet.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776910084, "uuid": "4354c4ed-3eb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-4c.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776980105, "uuid": "4ae771ab-3f5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-tideex.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776967990, "uuid": "163eea7d-3f40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solline1ix.rainbow7ain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776906064, "uuid": "e7769002-3eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-8v.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776924371, "uuid": "87282b47-3eda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "storsens.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776984307, "uuid": "138c042f-3f66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "supply-basi.plantpo1luter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776948064, "uuid": "b156f302-3f11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "supsensor.sylov8en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776975007, "uuid": "6c4be483-3f50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-draon.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776925570, "uuid": "51db3765-3edd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-valeor.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776978128, "uuid": "b0bb78c5-3f57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talspirea9.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776964330, "uuid": "90bc1491-3f37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "timberexpose.zom8lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776942666, "uuid": "1fcf6b80-3f05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4cke-chain.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776941831, "uuid": "2dcc96da-3f03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trans6-stream.2zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776984971, "uuid": "9f406565-3f67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-draa.plantpo1luter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776961448, "uuid": "dae76fda-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ttgfvj.bovla7xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776926285, "uuid": "fc19549f-3ede-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "v3lve4-core.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776983706, "uuid": "ada30452-3f64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valeanc.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776973386, "uuid": "a637f49e-3f4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-lineet.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776970685, "uuid": "5c338e32-3f46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velnexor3.dark-hypnosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776947227, "uuid": "be86c7e7-3f0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "veltideen.sylov8en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776906364, "uuid": "99e61790-3eb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-3.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776920530, "uuid": "95ac90d9-3ed1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-3m.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916027, "uuid": "196dc554-3ec7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-4b.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776910447, "uuid": "1b7aca94-3eba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-9.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776931384, "uuid": "db65c2b1-3eea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voicebund.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776950825, "uuid": "1ed6f998-3f18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vormark6um.to1varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776965471, "uuid": "3884fedd-3f3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "w90084qc.zom8lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776917285, "uuid": "074ab5c9-3eca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wald-2x.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776907744, "uuid": "d0b833ad-3eb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wald-9.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776940929, "uuid": "142d4203-3f01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wi1d-array.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776916506, "uuid": "37666ccc-3ec8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-9q.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776963733, "uuid": "2caafe83-3f36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xj15ti.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776976050, "uuid": "da0457e7-3f52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xjnorrmf.through7esid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776940444, "uuid": "f37888ff-3eff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xwql.rentcad.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776984008, "uuid": "613b18a5-3f65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xzkgjdst.capriccio-nephew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776954067, "uuid": "ab3cc710-3f1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yeay.kymle6rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776973985, "uuid": "0b5b7cfe-3f4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yt3oufng.polyate-eye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776977825, "uuid": "fbf29c8b-3f56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yxex4i.alexand-trouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776912728, "uuid": "6b1b4dbd-3ebf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-6x.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776903783, "uuid": "97c7f51e-3eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-w2.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776981424, "uuid": "5d884bd8-3f5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-drais.boatdi1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776923650, "uuid": "d98c902f-3ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencrest9um.wertbash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776962108, "uuid": "63d4d4d6-3f32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenmarka.qi2mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776927124, "uuid": "f0238a1e-3ee0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zkmoskj.qazsadf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776946269, "uuid": "83586aeb-3f0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zyddq.ra5ximor.in.net" } ] } }